Lead, Global Cybersecurity Governance & CISO

OCBC Group; Singapore; On-site; SGD 180,000 - 320,000; Full time

Job summary

OCBC Group is seeking a senior leader to head Global Cybersecurity Governance and the CISO Office in Singapore. The role oversees budgeting, governance, regulatory compliance, audit coordination, and third‑party cyber risk across the Group, interfacing with senior stakeholders and regulators.

You will translate cybersecurity strategy into measurable priorities, drive governance mechanisms, and report on investments, risks and remediation progress to the Global CISO and executive committees.

Qualifications

• Senior cybersecurity governance leader with strong experience across cyber risk, regulatory compliance, audit, third-party risk, and financial/business management.

Responsibilities

• Lead governance, assurance and business management functions supporting the Global CISO and Group Cybersecurity.
• Coordinate cybersecurity budgeting, forecasting, and management reporting across the organization.
• Oversee regulatory compliance, internal policies, standards, and control obligations.
• Coordinate internal and external cybersecurity audits and remediation tracking.
• Oversee third-party and supply chain cyber risk management and oversight.
• Drive cybersecurity awareness and culture with 2LOD and frontline teams.
• Support executive governance and reporting to risk committees and boards.

Skills

Cybersecurity governance

Regulatory compliance

Audit coordination

Cyber risk management

Financial management

Stakeholder management

Job description

## Lead, Global Cybersecurity Governance & CISOApply: Onsite: OCBC Singapore: Full time: Posted Today: JR00011590# **WHO WE ARE:**As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.Your Opportunity Starts Here.# Why Join Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering Lead, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. How you succeed Responsible for leading the governance, assurance and business management functions supporting the Global CISO and the Group Cybersecurity organisation. The role provides central oversight and coordination across cybersecurity financial management, regulatory compliance, third-party and supply chain cyber risk, cybersecurity awareness, audit and assurance, and engagement with independent risk and control functions. The role acts as a key interface between the Global CISO organisation and senior stakeholders across the Group, ensuring that cybersecurity priorities, obligations, risks, investments and assurance activities are effectively governed, coordinated and reported. What you do* Cybersecurity Business & Financial Management – Lead cybersecurity budgeting, forecasting, financial planning, investment tracking, and management reporting. Provide visibility of cyber spend, resource allocation and delivery against strategic priorities.* Cybersecurity Governance & Compliance – Oversee the cybersecurity governance framework and coordinate compliance with applicable regulatory requirements, internal policies, standards, and control obligations across the Group.* Regulatory & Second-Line Engagement – Act as a central coordination point between the Global CISO organisation and the second-line Risk and Compliance functions, ensuring effective management of cybersecurity risk matters, regulatory requirements, assessments, and remediation commitments.* Internal & External Audit Coordination – Lead coordination of cybersecurity-related internal and external audits, including evidence management, management responses, remediation tracking, and closure of audit findings.* Third-Party & Supply Chain Cyber Risk – Oversee the cybersecurity aspects of third-party and supply chain risk of group operation and technology devision, including governance, risk assessments, monitoring, issue escalation, and remediation oversight.* Cybersecurity Awareness & Culture – work consistently with 2LOD on cybersecurity awareness and education programme, including employee awareness, targeted training, phishing exercises and initiatives to strengthen cybersecurity culture.* Cyber Risk & Assurance Oversight – Coordinate cybersecurity control assurance, risk assessments, key risk indicators, management reporting and tracking of material cyber risks and control deficiencies.* Executive & Committee Governance – Support the Global CISO in preparing cybersecurity reporting for senior management, risk committees, executive committees and boards, ensuring clear visibility of material risks, issues, investments, and remediation progress.* Cybersecurity Office Management – Operate the Global CISO Office as the central governance and coordination function across the cybersecurity organisation, driving planning, prioritisation, management reporting, action tracking and cross-functional initiatives.* Strategic Support to the Global CISO – Support the Global CISO in translating cybersecurity strategy into measurable priorities, governance mechanisms and management actions, and drive follow-through across the cybersecurity organisation and relevant Group entities.# Who you are The role will work closely with the Global CISO, Technology leadership, CRO organisation, Operational Risk, Compliance, Internal Audit, Finance, Procurement, HR, Legal, business units and subsidiary CISOs, as well as relevant external auditors and regulators. Senior cybersecurity governance leader with strong experience across cyber risk, regulatory compliance, audit, third-party risk, and financial/business management. The individual should have the executive presence to engage senior stakeholders and challenge effectively across first, second and third lines of defence, while being able to drive execution across a complex global organisation. Strong knowledge of financial-services cybersecurity regulation and risk-management frameworks is important, together with excellent governance, communication, stakeholder-management, and organisational capabilities. Who we are As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.# # **What we offer:**Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.