Security Governance Lead - Cloud, Risk & Compliance

FLO ENERGY SINGAPORE PTE. LTD.; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Flo Energy Singapore Pte. Ltd. seeks a Senior Security Lead to drive cybersecurity strategy, governance, and risk management across the organisation. You will partner with Engineering, Legal, Compliance, and business stakeholders to embed security across people, processes, and technology.

You will lead security policy creation, cloud security governance, and incident response, while guiding secure development practices and security operations to mature Flo's security posture.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field.
• Strong experience in cybersecurity leadership, governance, and risk management.
• Experience developing cybersecurity strategies, roadmaps, and security programs.
• Strong understanding of cloud security, application security, and secure architecture principles.
• Experience with threat modelling, security reviews, vulnerability management, and Secure SDLC.
• Familiarity with SIEM, EDR, incident response, and security monitoring practices.
• Experience managing security awareness and phishing simulation programs.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, and PDPA.
• Strong stakeholder management, communication, and influencing skills.
• Ability to translate technical security risks into business-focused recommendations.
• Relevant certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 Lead Implementer/Auditor, or equivalent are advantageous.

Responsibilities

• Define and drive Flo's cybersecurity strategy and roadmap.
• Develop and maintain security policies, standards, and governance frameworks.
• Develop and maintain Flo's Cloud Security Framework and security baselines to support secure cloud adoption.
• Own the cybersecurity risk register and conduct security risk assessments.
• Lead compliance initiatives including ISO 27001, SOC 2, PDPA, and other applicable frameworks.
• Provide security guidance for projects, cloud environments, applications, and technology initiatives.
• Promote Secure SDLC, threat modelling, and security best practices across Engineering teams.
• Provide governance and oversight of security capabilities such as SIEM, EDR/XDR, IAM and MDM.
• Coordinate incident response activities and support continuous improvement of security controls.
• Lead cross-functional security initiatives and projects that improve Flo's overall security posture.
• Work closely with Engineering and Infrastructure teams to implement security improvements across applications, cloud platforms, infrastructure, and business systems.
• Identify security gaps and work with Engineering, Infrastructure, and business teams to implement appropriate security improvements.
• Lead Flo's Security Guild, facilitating security discussions, sharing best practices, and serving as the primary point of contact for security-related guidance.
• Promote security awareness and foster a strong security culture across the organisation
• Develop and maintain Flo's security awareness programme.
• Lead security awareness initiatives, phishing simulations, and security training.
• Promote a strong security culture across the organisation
• Assess the security of new and existing vendors, SaaS platforms, and third-party service providers.
• Evaluate security risks and provide recommendations during vendor selection.
• Work with Legal and business stakeholders to address security requirements during vendor engagements.
• Monitor third-party security risks throughout the vendor lifecycle

Skills

Cybersecurity leadership

Governance

Risk management

Cloud security

Application security

Secure SDLC

Threat modelling

Vulnerability management

Security monitoring

Security awareness

Security governance

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field

Tools

SIEM

EDR/XDR

IAM

MDM

Job description

Flo Energy Singapore Pte. Ltd. seeks a Senior Security Lead to drive cybersecurity strategy, governance, and risk management across the organisation. You will partner with Engineering, Legal, Compliance, and business stakeholders to embed security across people, processes, and technology.

You will lead security policy creation, cloud security governance, and incident response, while guiding secure development practices and security operations to mature Flo's security posture.