Head of IT Security & Risk - Financial Services

FWD Group Management Holdings Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

FWD Group is seeking a dedicated IT Security Lead in Singapore to drive the local IT Security program and ensure compliance with MAS TRM, PDPC, and outsourcing guidelines. You will lead cross-functional teams, collaborate with Group IT Security, and coordinate incident response and risk-mapping activities.

The role requires 8+ years in IT security, leadership experience, and CISSP/CRISC preferred. A strong emphasis on governance, security-by-design, and stakeholder communication is essential.

Qualifications

• Degree from Information Technology or equivalent discipline.
• Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
• Business IT Security leadership experience.
• Certification on CISSP / CRISC is preferred.

Responsibilities

• Lead Business IT Security with support of local IT Team and Group IT Security.
• Define and maintain a Local Business Unit IT Security Program for continuous improvement.
• Drive local IT Security Initiatives and Projects definition, implementation, and architecture decisions.
• Coordinate Group IT Security Initiatives rollout in country and ensure governance.
• Support IT Security Metrics and Risk Mapping, addressing deficiencies.
• Drive awareness of IT Security solutions and processes across the organization.
• Work with Head of IT and Group CISO to provide regular updates to management.

Skills

IT Security

Leadership

Communication

Stakeholder Management

Education

Bachelor's degree in IT

Job description

FWD Group is seeking a dedicated IT Security Lead in Singapore to drive the local IT Security program and ensure compliance with MAS TRM, PDPC, and outsourcing guidelines. You will lead cross-functional teams, collaborate with Group IT Security, and coordinate incident response and risk-mapping activities.

The role requires 8+ years in IT security, leadership experience, and CISSP/CRISC preferred. A strong emphasis on governance, security-by-design, and stakeholder communication is essential.