Senior Business Information Security Officer

The Western Union Company; Singapore; Hybride; SGD 180 000 - 210 000; Plein temps

Avantages offerts par ce poste

Paid Time Offs

Employee Assistance Programs

Global Recognition and Rewards Program

Employee Wellness

Résumé du poste

The Western Union Company in Singapore seeks a Senior Manager, Business Information Security Officer (BISO) to act as the Global CISO’s regional cybersecurity representative for APAC. Based in Singapore, you will bridge global security strategy with local regulatory expectations and lead regional risk management and incident response efforts.

You will own governance, coordinate with regulators, and ensure cloud, data, and application security across APAC while coaching regional teams on secure

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related discipline required; advanced degree preferred.
• 8+ years of progressive experience in information security, cybersecurity engineering, or technical risk management.
• Experience engaging with regulators in APAC region.
• Strong knowledge of cloud platforms, IAM, network/endpoint security, and threat detection.

Responsabilités

• Serve as APAC cybersecurity representative to regional executives and regulators.
• Lead governance for regional information security and regulatory alignment.
• Oversee regional regulatory activities and incident coordination.
• Drive adoption of global security policies and controls in APAC.
• Provide technical assurance on security architecture reviews and threat models.

Connaissances

APAC Leadership

Cloud Security

Regulatory Engagement

Incident Response

Cybersecurity Strategy

Formation

Bachelor's degree in CS / InfoSec

Outils

AWS

Azure

NIST CSF

Description du poste

Senior Manager, Business Information Security Officer (BISO), Singapore

The Senior Manager, Business Information Security Officer (BISO) serves as the Global CISO’s designated cybersecurity representative for the APAC region, based in Singapore. This is a senior technical leadership role within Cybersecurity, acting as the primary bridge between global cybersecurity and regional business. The role combines enterprise program ownership with hands‑on technical acumen and local CISO responsibilities, ensuring that cybersecurity risks, controls, and initiatives are effectively delivered across APAC, and that the region has a single, credible point of contact for business leaders and regulators, particularly during cyber incidents.

Leadership Responsibilities

Serve as the Global CISO’s cybersecurity representative for the APAC region, articulating cyber risk posture, threat landscape, control effectiveness, and strategic initiatives to regional executives, boards, and regulators. Provide senior technical leadership and direction for business aligned information security activities across APAC, ensuring alignment with the global cybersecurity strategy, architecture, and control framework. Design, implement, and continuously improve regional information security governance processes to ensure consistent, effective risk management and regulatory alignment. Own regional oversight of cybersecurity regulatory activities as knowledge expert and escalation contact, translating technical control requirements into business language for senior stakeholders. Drive adoption and effective execution of global information security and cybersecurity policies, standards, and technical controls within the APAC region. Develop and mature regular reporting and metrics on the state of cybersecurity risk, control effectiveness, and key technical issues impacting the APAC region. Coach regional business and technology stakeholders on cyber risks, secure design principles, secure architecture, and engineering best practices, reinforcing a sustainable security‑aware culture.

Business Information Security & Local CISO Responsibilities

Act as the local CISO and primary cybersecurity point of contact for the business, IT, legal, compliance, audit, operations, product teams, and regulators across Singapore and the broader APAC region. Establish and maintain a deep technical understanding of APAC entities, including business processes, applications, infrastructure, cloud environments, data flows, customers, and third‑party dependencies, to inform risk‑based decision‑making. Direct the identification, assessment, and ongoing monitoring of local cybersecurity risks and technical control gaps, including differences between global security requirements and APAC specific regulatory or supervisory obligations (e.g., Singapore MAS, Bank Indonesia Cyber Resilience, Australia APRA, Philippines BSP IT Risk Management Framework, and equivalents). Lead the regional cybersecurity initiative portfolio, partnering with engineering, infrastructure, and product teams to prioritize, sequence, and deliver technical remediation and security uplift projects. Hold accountability for compliance with applicable local laws, regulations, and supervisory expectations related to information security, serving as a senior point of engagement with regulators, auditors, and internal stakeholders. Serve as the regional point of contact for the business and regulators during cybersecurity incidents; lead regional incident coordination with the Global Incident Response Team, drive containment and recovery decisions, and manage stakeholder and regulatory notifications. Provide technical assurance on security architecture reviews, threat models, penetration test findings, and vulnerability management outcomes for APAC applications and infrastructure.

Role Requirement

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related discipline required; advanced degree preferred.


• 8+ years of progressive experience in information security, cybersecurity engineering, or technical risk management, including time in a hands‑on technical role (e.g., security architecture, security operations, application or cloud security).


• Demonstrated experience leading cybersecurity activities in the APAC region, engaging directly with country regulators such as Singapore, Australia, Philippines, or equivalent, and managing regional cyber incidents.


• Strong working knowledge of cloud platforms (AWS, Azure), identity and access management, network and endpoint security, application security, and modern threat detection and response practices.


• Knowledgeable across a broad range of cybersecurity and regulatory concepts, including NIST CSF, ISO 27001/27002, PCI DSS, MITRE ATT&CK, secure SDLC, and third‑party risk management.


• Experience interacting and managing geographically diverse, technical teams.


• Professional security certifications such as CISSP, CISM, CCSP, CISA, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent are strongly preferred.

Key Attributes

• Trusted technical advisor mindset with the ability to influence senior business, technology, and regulatory stakeholders.


• Strong written and verbal communication, able to translate complex technical topics into clear business and regulatory narratives.


• Strong ownership, accountability, and calm judgment under pressure, particularly during live incidents.


• Balances cybersecurity risk management with business enablement and pragmatic delivery.


• Demonstrated ability to work effectively with all levels of an organization across cultures and time zones.

Western Union values in-person collaboration, problem solving, and ideation whenever possible. We believe this fosters common ways of working and supports how we execute initiatives for our customers. The expectation is to work from the office a minimum of three days a week.

BENEFITS AND OTHER DETAILS

Benefits You will also have access to short-term incentives, accident and life insurance, and access to best-in-class development platforms, to name a few (https://careers.westernunion.com/global-benefits/).

Please see the location-specific benefits below and note that your Recruiter may share additional role-specific benefits during your interview process or in an offer of employment.

Your Singapore specific benefits include:

• Paid Time Offs


• Employee Assistance Programs


• Global Recognition and Rewards Programs


• Employee Wellness

We are passionate about honoring our employee's identity and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting the communities we serve.

We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status.

The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

#LI-Hybrid #LI-HR1 Estimated Job Posting End Date: 10-31-2026 This application window is a good‑faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.

At Western Union, we’re more than a trusted name in global payments. We’re moving beyond remittances, beyond cash, and beyond the expectations of our customers. Our talented teams enable us to transform into a digital‑first company, built on the strength of our retail foundation and powered by next‑generation payments. All this with the goal of helping people prosper. Our customers inspire us to push boundaries and create services that make life easier and communities stronger. Wherever you are in the world, we’re committed to shaping the next generation of financial experiences. Join us as we go beyond and be part of a team that’s redefining what’s possible.