Lead, Global Cybersecurity Governance & CISO

OCBC (Singapore); Singapore; On-site; SGD 170,000 - 230,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits

Job summary

OCBC Singapore is seeking a Senior Cyber Engineering Lead to drive governance, assurance and financial management for the Global CISO and Group Cybersecurity. You will coordinate regulatory compliance, risk assessments and audits, and engage with senior stakeholders across the Group to ensure governance and reporting of cybersecurity investments and remediation progress.

The role leads cross-functional teams in budgeting, risk management, awareness programs, and strategic cybersecurity

Qualifications

• Senior cybersecurity governance leader with experience across cyber risk, regulatory compliance, audit and third-party risk.
• Executive presence to engage senior stakeholders across multiple lines of defence.

Responsibilities

• Lead cybersecurity budgeting, forecasting, financial planning, investment tracking, and reporting.
• Oversee governance framework and coordinate regulatory compliance across the Group.
• Coordinate cyber risk matters, regulatory requirements, assessments, and remediation commitments.
• Lead coordination of cybersecurity audits and remediation tracking.
• Oversee third-party and supply chain cyber risk governance and risk assessments.
• Drive cybersecurity awareness and education programmes with 2LOD.
• Support Global CISO with governance for senior management and boards.

Skills

Cyber governance

Regulatory compliance

Audit coordination

Stakeholder management

Financial management

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering Lead, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry.

How you succeed

Responsible for leading the governance, assurance and business management functions supporting the Global CISO and the Group Cybersecurity organisation. The role provides central oversight and coordination across cybersecurity financial management, regulatory compliance, third-party and supply chain cyber risk, cybersecurity awareness, audit and assurance, and engagement with independent risk and control functions.

The role acts as a key interface between the Global CISO organisation and senior stakeholders across the Group, ensuring that cybersecurity priorities, obligations, risks, investments and assurance activities are effectively governed, coordinated and reported.

What you do

• Cybersecurity Business & Financial Management – Lead cybersecurity budgeting, forecasting, financial planning, investment tracking, and management reporting. Provide visibility of cyber spend, resource allocation and delivery against strategic priorities.
• Cybersecurity Governance & Compliance – Oversee the cybersecurity governance framework and coordinate compliance with applicable regulatory requirements, internal policies, standards, and control obligations across the Group.
• Regulatory & Second-Line Engagement – Act as a central coordination point between the Global CISO organisation and the second-line Risk and Compliance functions, ensuring effective management of cybersecurity risk matters, regulatory requirements, assessments, and remediation commitments.
• Internal & External Audit Coordination – Lead coordination of cybersecurity-related internal and external audits, including evidence management, management responses, remediation tracking, and closure of audit findings.
• Third-Party & Supply Chain Cyber Risk – Oversee the cybersecurity aspects of third-party and supply chain risk of group operation and technology devision, including governance, risk assessments, monitoring, issue escalation, and remediation oversight.
• Cybersecurity Awareness & Culture – work consistently with 2LOD on cybersecurity awareness and education programme, including employee awareness, targeted training, phishing exercises and initiatives to strengthen cybersecurity culture.
• Cyber Risk & Assurance Oversight – Coordinate cybersecurity control assurance, risk assessments, key risk indicators, management reporting and tracking of material cyber risks and control deficiencies.
• Executive & Committee Governance – Support the Global CISO in preparing cybersecurity reporting for senior management, risk committees, executive committees and boards, ensuring clear visibility of material risks, issues, investments, and remediation progress.
• Cybersecurity Office Management – Operate the Global CISO Office as the central governance and coordination function across the cybersecurity organisation, driving planning, prioritisation, management reporting, action tracking and cross-functional initiatives.
• Strategic Support to the Global CISO – Support the Global CISO in translating cybersecurity strategy into measurable priorities, governance mechanisms and management actions, and drive follow-through across the cybersecurity organisation and relevant Group entities.

Who you are

The role will work closely with the Global CISO, Technology leadership, CRO organisation, Operational Risk, Compliance, Internal Audit, Finance, Procurement, HR, Legal, business units and subsidiary CISOs, as well as relevant external auditors and regulators.

Senior cybersecurity governance leader with strong experience across cyber risk, regulatory compliance, audit, third-party risk, and financial/business management. The individual should have the executive presence to engage senior stakeholders and challenge effectively across first, second and third lines of defence, while being able to drive execution across a complex global organisation.

Strong knowledge of financial-services cybersecurity regulation and risk-management frameworks is important, together with excellent governance, communication, stakeholder-management, and organisational capabilities.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.