Head of Security Operations

Kerry Consulting; Singapore; On-site; SGD 240,000 - 420,000; Full time

Job summary

Kerry Consulting is seeking an experienced cybersecurity leader to oversee security operations, incident response and defense enhancements across a highly regulated enterprise. The role combines hands-on security expertise with operational ownership, spanning infrastructure, cloud security, IAM and advisory work, while leading a capable team across on-prem and multi-cloud environments.

You will partner with technology and business stakeholders to balance risk and compliance, deliver practical

Qualifications

• 15+ years of information security experience in regulated environments.
• Strong experience in security operations, infrastructure, and cloud security.
• Hands-on multi-cloud experience (SaaS, PaaS, IaaS) with incident management.
• Experience in vulnerability management and security architecture/advisory.
• Proven leadership and stakeholder-management skills.
• Certifications such as CISSP, CISA, CRISC, CCSP advantageous.

Responsibilities

• Lead cybersecurity operations covering threat detection and response, vulnerability management, security monitoring and incident management.
• Oversee infrastructure security across on-premises and cloud environments, including vulnerability management, server hardening, security monitoring and architecture reviews.
• Maintain oversight of cloud security posture, assess new cloud solutions and address gaps and misconfigurations.
• Provide leadership across Identity & Access Management (IAM) governance.
• Partner with the SOC on security monitoring, incident response and new capabilities.
• Act as trusted security advisor to Technology and Business stakeholders, balancing security, regulatory and business needs.
• Lead and develop a cybersecurity team, driving capability development and continuous improvement.

Skills

Security operations

Cloud security

Leadership

Threat detection

Incident management

Vulnerability management

Stakeholder management

Education

Relevant certifications (CISSP/CISA/CRISC/CCSP)

Job description

A large, highly regulated organisation is looking for an experienced cybersecurity leader to oversee its security operations and strengthen its defensive capabilities.

The role combines technical security expertise, operational ownership and people leadership, with responsibility across security operations, infrastructure and cloud security, vulnerability management, IAM, incident response and security advisory.

Key Responsibilities:

• Lead cybersecurity operations covering threat detection and response, vulnerability management, security monitoring and incident management.
• Oversee infrastructure security across on-premises and cloud environments, including vulnerability management, server hardening, security monitoring and security architecture reviews.
• Maintain oversight of cloud security posture, assess new cloud solutions and ensure security gaps and misconfigurations are appropriately addressed.
• Provide leadership and oversight across Identity & Access Management (IAM) governance.
• Partner with the SOC on security monitoring, incident response and the implementation of new cybersecurity capabilities.
• Act as a trusted security advisor to Technology and Business stakeholders, providing practical recommendations that balance security, regulatory and business requirements.
• Lead and develop an established cybersecurity team, driving technical capability development and continuous improvement.

Requirements:

• 15+ years of information security experience, preferably within a highly regulated environment.
• Strong experience across security operations, infrastructure security and cloud security, with sufficient technical depth to engage and challenge engineering teams.
• Hands-on understanding of multi-cloud environments across SaaS, PaaS and IaaS, together with cyber incident management experience.
• Experience across vulnerability management, infrastructure hardening, security architecture/advisory and security assessments.
• Strong people leadership and senior stakeholder-management capabilities.
• Relevant certifications such as CISSP, CISA, CRISC, CCSP or cloud/security architecture certifications would be advantageous.