Lead, Global Cybersecurity Governance & CISO

OCBC; Singapore; On-site; SGD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive salary

Flexible benefits

Community initiatives

Learning & development

Wellbeing support

Job summary

OCBC is seeking a Senior Cybersecurity Governance Leader in Singapore to oversee governance, assurance, and financial management for the Global CISO and Group Cybersecurity functions. You will coordinate regulatory compliance, audits, and third‑party risk across a complex, multi‑entity organisation, driving reporting and strategic alignment.

The role requires executive presence to engage senior stakeholders, manage cross‑functional initiatives, and translate cybersecurity strategy into

Qualifications

• Experience leading cybersecurity governance and assurance programs.
• Strong knowledge of financial management, budgeting and reporting in cybersecurity.
• Executive presence to engage senior stakeholders across lines of defence.

Responsibilities

• Lead governance, assurance and business management for Global CISO and Group Cybersecurity.
• Oversee regulatory compliance, audits, third-party and supply chain risk.
• Coordinate cyber risk, control assurance and KPIs.
• Prepare reporting for senior management and boards.
• Drive cyber awareness and cross-functional initiatives.
• Operate Global CISO Office with planning and tracking.
• Translate strategy into measurable priorities.

Skills

Cybersecurity governance

Regulatory compliance

Audit

Third-party risk

Financial management

Stakeholder management

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join
Protecting our customers’ assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering Lead, you’ll play a critical role in safeguarding our systems and networks from cyber threats. You’ll be part of a team that’s shaping the future of cybersecurity in the financial industry.

How you succeed
Responsible for leading the governance, assurance and business management functions supporting the Global CISO and the Group Cybersecurity organisation. The role provides central oversight and coordination across cybersecurity financial management, regulatory compliance, third-party and supply chain cyber risk, cybersecurity awareness, audit and assurance, and engagement with independent risk and control functions.

The role acts as a key interface between the Global CISO organisation and senior stakeholders across the Group, ensuring that cybersecurity priorities, obligations, risks, investments and assurance activities are effectively governed, coordinated and reported.

What you do

• Cybersecurity Business & Financial Management – Lead cybersecurity budgeting, forecasting, financial planning, investment tracking, and management reporting. Provide visibility of cyber spend, resource allocation and delivery against strategic priorities.
• Cybersecurity Governance & Compliance – Oversee the cybersecurity governance framework and coordinate compliance with applicable regulatory requirements, internal policies, standards, and control obligations across the Group.
• Regulatory & Second-Line Engagement – Act as a central coordination point between the Global CISO organisation and the second‑line Risk and Compliance functions, ensuring effective management of cybersecurity risk matters, regulatory requirements, assessments, and remediation commitments.
• Internal & External Audit Coordination – Lead coordination of cybersecurity‑related internal and external audits, including evidence management, management responses, remediation tracking, and closure of audit findings.
• Third‑Party & Supply Chain Cyber Risk – Oversee the cybersecurity aspects of third‑party and supply chain risk of group operation and technology devision, including governance, risk assessments, monitoring, issue escalation, and remediation oversight.
• Cybersecurity Awareness & Culture – work consistently with 2LOD on cybersecurity awareness and education programme, including employee awareness, targeted training, phishing exercises and initiatives to strengthen cybersecurity culture.
• Cyber Risk & Assurance Oversight – Coordinate cybersecurity control assurance, risk assessments, key risk indicators, management reporting and tracking of material cyber risks and control deficiencies.
• Executive & Committee Governance – Support the Global CISO in preparing cybersecurity reporting for senior management, risk committees, executive committees and boards, ensuring clear visibility of material risks, issues, investments and remediation progress.
• Cybersecurity Office Management – Operate the Global CISO Office as the central governance and coordination function across the cybersecurity organisation, driving planning, prioritisation, management reporting, action tracking and cross‑functional initiatives.
• Strategic Support to the Global CISO – Support the Global CISO in translating cybersecurity strategy into measurable priorities, governance mechanisms and management actions, and drive follow‑through across the cybersecurity organisation and relevant Group entities.

Who you are

The role will work closely with the Global CISO, Technology leadership, CRO organisation, Operational Risk, Compliance, Internal Audit, Finance, Procurement, HR, Legal, business units and subsidiary CISOs, as well as relevant external auditors and regulators.

Senior cybersecurity governance leader with strong experience across cyber risk, regulatory compliance, audit, third‑party risk, and financial/business management. The individual should have the executive presence to engage senior stakeholders and challenge effectively across first, second and third lines of defence, while being able to drive execution across a complex global organisation.

Strong knowledge of financial‑services cybersecurity regulation and risk‑management frameworks is important, together with excellent governance, communication, stakeholder‑management, and organisational capabilities.

Who we are
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation.
But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry‑leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.