Regional Information Security Officer

Gravitas Recruitment Group (Global) Ltd; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Gravitas Recruitment Group (Global) Ltd in Singapore leads a multinational cybersecurity program, directing strategy, risk management and executive advisory across jurisdictions, and coordinating cross-border security controls and board-level reporting.

You will partner with business and technology leaders to translate security priorities into practical local actions, mentor security managers, and raise security awareness and accountability throughout the organisation, with a focus on pragmatic

Qualifications

• Extensive information security experience with senior leadership responsibility.
• Proven track record leading security programmes across jurisdictions within a large organisation.
• Experience aligning local implementation with enterprise security requirements.
• Confidently presenting cybersecurity matters to executives and boards.
• Strong understanding of information security standards and control frameworks.
• Practical knowledge of application and infrastructure security, vulnerability management and patching.
• Ability to prioritise improvements and drive remediation to closure.
• Experience addressing cybersecurity regulatory requirements across jurisdictions.
• Strong stakeholder influence and ability to gain buy-in from leaders.
• Clear written and verbal communication for non-technical audiences.

Responsibilities

• Oversee security strategy and delivery across the portfolio, tracking progress and risk.
• Lead security governance discussions and present updates to executives.
• Coordinate incident preparedness and response across multiple jurisdictions.
• Support third-party assessments and control testing.
• Drive improvement actions and ensure regulatory compliance across regions.
• Mentor and develop security managers in a matrix organisation.

Skills

Security leadership

Strategic planning

Risk assessment

Governance

Incident response

Stakeholder management

Regulatory compliance

Communication

Agile experience

Multinational experience

Education

Bachelor's degree in IT / Computing / Information Security

CISSP or equivalent certification

Job description

Lead cybersecurity oversight across a multinational business portfolio, combining security programme leadership, technical assurance and executive advisory responsibilities.

You will work with business and technology leaders to identify material security risks, strengthen controls and translate enterprise security priorities into practical local action. The role includes leading security managers across multiple jurisdictions, advising senior decision-makers and building security awareness and accountability throughout the business.

Key Responsibilities

Security strategy and delivery

• Oversee implementation of enterprise security requirements across the portfolio, assessing progress, control effectiveness and outstanding risks.
• Work with technology leaders and delivery teams to advance agreed security priorities and address implementation gaps.
• Ensure wider security plans reflect business needs, operating conditions and local requirements.
• Provide leadership with clear assessments of programme delivery, security posture and emerging needs.

Risk assessment and technical assurance

• Evaluate cybersecurity risks and controls across business operations and technology environments.
• Oversee security assurance for technology projects, including security reviews, penetration testing, vulnerability assessments and adversarial testing.
• Drive resolution of security issues affecting applications, infrastructure, vulnerability management and patching.
• Support third-party cybersecurity assessments in coordination with enterprise assurance functions.
• Review and oversee exceptions to security policies, ensuring associated risks receive appropriate scrutiny.
• Contribute security expertise to business transformation, technology integration and acquisition-related activities.

Governance and compliance

• Maintain meaningful security metrics and elevate significant risks, control weaknesses and delivery concerns.
• Lead security governance discussions, prepare decision-ready materials and follow through on improvement actions.
• Present security risks, priorities and programme progress to executives, risk committees and boards.
• Track applicable cybersecurity obligations across jurisdictions and lead the security response to regulatory reviews and enquiries.
• Advise business leaders on external requests concerning cybersecurity controls.
• Support security-related audits and ensure findings within the role’s remit are addressed systematically.

Incident preparedness and response

• Coordinate with security operations, privacy specialists and executive stakeholders during cybersecurity incidents.
• Design and facilitate scenario-based exercises to strengthen incident readiness and cyber resilience.
• Assess relevant developments in the threat landscape and brief leadership on emerging threats and vulnerabilities.

Business engagement and security culture

• Build effective working relationships with senior business, technology, operations and risk leaders.
• Secure leadership support for cybersecurity improvements and encourage clear ownership of security risks.
• Work with privacy, legal, compliance and independent risk functions on shared security concerns.
• Represent the portfolio’s security needs in wider enterprise discussions.
• Deliver awareness initiatives that address relevant behaviours, business risks and local needs.

People leadership

• Lead security managers working across multiple jurisdictions, establishing clear responsibilities and performance expectations.
• Coach and develop team members, strengthen internal talent and maintain an inclusive, high-performing working environment.
• Coordinate with specialist security teams to support consistent delivery and continuous improvement.

Essential experience and capabilities

• Extensive, broad-based information security experience, including hands-on technical expertise and senior leadership responsibility.
• Demonstrated success leading security teams and delivering security programmes across multiple jurisdictions within a large multinational organisation.
• Experience aligning local implementation with wider enterprise security requirements.
• Confidence presenting cybersecurity matters to executive leadership, risk committees and boards.
• Strong understanding of recognised information security standards, control frameworks and established industry practices.
• Practical knowledge of application and infrastructure security, security controls, vulnerability assessment, application scanning and patch management.
• Ability to assess security problems, prioritise improvements and drive remediation to completion.
• Experience addressing cybersecurity regulatory requirements across different jurisdictions.
• Strong stakeholder influence, with the ability to gain support from business and technology leaders.
• Clear written and verbal communication, including the ability to explain technical risks to non-technical audiences.
• Ability to work independently and collaboratively within a matrix organisation.
• Experience working effectively in agile, fast-moving environments.

Preferred qualifications and background

• A degree in computing, information systems, information technology or a related discipline.
• Recognised professional certification in information security management, cybersecurity or security fundamentals.
• Familiarity with the business and operational context of a regulated organisation.