Manager/Lead Cybersecurity

SCIENTE INTERNATIONAL PTE. LTD.; Singapore; On-site; SGD 180,000 - 300,000; Full time

Job summary

PVH (Tommy Hilfiger/Calvin Klein) seeks an experienced cybersecurity leader to drive enterprise-wide security strategy, governance, risk management, incident response and security architecture in support of digital transformation. You will partner with business and technology stakeholders to embed security by design across ICT systems and digital services.

Responsibilities include leading incident response, cloud security, security architecture, and security operations while shaping policies,

Qualifications

• Bachelor's degree in a tech discipline and 8-10 years experience in cybersecurity or ICT security management.
• CISSP certification and proven enterprise security leadership experience.
• Experience leading cybersecurity initiatives across enterprise ICT environments.
• Knowledge of security-by-design, DevSecOps, IaC, and secure CI/CD pipelines.
• Cloud security across IaaS, PaaS, SaaS and cloud-native technologies.

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation while ensuring security and resilience.
• Develop and continuously enhance cybersecurity strategy, policies, standards and work plans.
• Establish governance frameworks and ensure compliance with policies and best practices.
• Provide cybersecurity leadership across cloud adoption initiatives (IaaS, PaaS, SaaS).
• Lead risk management through threat-based assessments, monitoring and reporting.
• Develop and sustain awareness, education, and training programs.

Skills

CISSP

Security-by-design

DevSecOps

IaC

CI/CD security

Cloud security

Containers

Microservices

Serverless

Governance

Risk assessment

Incident response

Security frameworks

Stakeholder management

Education

Bachelor's Degree in Computer Science / Information Systems / Engineering / Cybersecurity

Job description

We are seeking an experienced cybersecurity leader to lead the enterprise-wide cybersecurity function in support of the digital transformation initiatives while ensuring the resilience, security, and compliance of ICT systems and digital services. The successful candidate will drive cybersecurity strategy, governance, risk management, incident response, and security architecture while partnering with business and technology stakeholders to embed security by design across the enterprise.

Mandatory Skill-set

• Bachelor's Degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technology discipline;
• Must have 8-10 years of progressive experience in cybersecurity, information security, or ICT security management, including leadership responsibilities;
• Certified Information Systems Security Professional (CISSP);
• Proven experience leading cybersecurity initiatives across enterprise ICT environments;
• Strong expertise in:Security-by-design principles and secure solution architecture reviews;
• DevSecOps practices, Infrastructure as Code (IaC), and securing CI/CD pipelines;
• Cloud security across IaaS, PaaS, and SaaS environments;
• Cloud-native technologies including containers, microservices, and serverless architectures;
• Enterprise cybersecurity governance, security architecture, and operational security;
• Cybersecurity risk assessment methodologies and risk treatment planning;
• Security incident response, digital investigations, and cyber resilience;
• Cybersecurity technologies, frameworks, and industry best practices;
• Strong understanding of cybersecurity risks including, Malware and ransomware, Data leakage and data protection, Compliance and regulatory risks, Secure configuration management and others;
• Strong leadership and stakeholder management skills with the ability to influence senior executives and cross-functional teams.

Desired Skill-set

• Certified Information Security Manager (CISM);
• Certified Cloud Security Professional (CCSP);
• GIAC Certified Incident Handler (GCIH),

Responsibilities

• Lead the enterprise-wide cybersecurity function to support digital transformation initiatives while ensuring the security and resilience of ICT systems;
• Develop, implement, and continuously enhance the cybersecurity strategy, policies, standards, and work plans, ensuring alignment with the strategic business objectives;
• Establish and maintain cybersecurity governance frameworks, ensuring compliance with cybersecurity policies, standards, and best practice;
• Provide cybersecurity leadership across cloud adoption initiatives, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS);
• Assess cybersecurity risks associated with cloud-native technologies such as containers, microservices, and serverless architectures;
• Lead enterprise cybersecurity risk management through threat-based risk assessments, risk treatment, monitoring, and reporting;
• Govern and enhance the enterprise cybersecurity posture by maintaining visibility and oversight of ICT assets, security architecture, and cybersecurity operational practices;
• Develop, maintain, and continuously improve the Cybersecurity Incident Response Plan and operational playbooks;
• Develop and sustain an enterprise -wide cybersecurity awareness, education, and training programme.

EA Licence No. 07C5639