SVP/MD, Security Engineering Lead, Technology Group

GIC Private Limited; Singapore; On-site; SGD 300,000 - 380,000; Full time

Benefits offered by this job

Flexible in-office/remote arrangement

Inclusive, equal opportunity employer

Job summary

GIC Private Limited is seeking an SVP/MD, Security Engineering Lead within the Technology Group in Singapore. The role leads IAM and broader security engineering across twelve domains, setting strategy and delivering scalable security platforms while driving a zero-trust transition.

Ideal candidates have 18+ years in cybersecurity with 8+ years in leadership, deep IAM, cryptography, and a track record of enterprise security transformations in regulated environments.

Qualifications

• 18+ years in cybersecurity or infrastructure
• 8+ years leading security engineering teams
• Deep IAM expertise incl IdP/SSO, identity governance and PAM platforms
• Strong understanding of cryptography, PKI, secrets management and cloud security
• Broad command of the security tooling landscape across the twelve domains
• Proven record of enterprise-scale security transformations from strategy to delivery
• Familiarity with security frameworks such as NIST CSF and ISO 27001
• Excellent leadership and executive communication, with credibility across technical and business audiences
• Professional certifications such as CISSP or CISM
• Experience in financial services or another highly regulated industry
• Experience shaping post-quantum cryptography or identity threat detection and response (ITDR) strategies

Responsibilities

• Lead IAM and security engineering across twelve security capability domains
• Set strategy, build and lead high-performing teams
• Deliver security platforms that are robust, scalable and easy for the business to use
• Drive threat prioritization, root cause analysis and remediation across teams
• Collaborate with Cyber Defence, Governance, Risk and other technology teams
• Advance zero trust architecture and secure software delivery practices

Skills

Security leadership

IAM expertise

Cryptography & PKI

Security architectures

Security frameworks

Executive communication

Post-quantum considerations

Financial services experience

Certifications CISSP/CISM

Tools

Microsoft Entra ID

Okta

SailPoint

CyberArk

Job description

SVP/MD, Security Engineering Lead, Technology Group

Location:

Singapore, SG

Job Function: Technology Group

Job Type: Permanent

GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we Work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group
The Technology Group (TG) is a key enabler to keep our business moving forward and is constantly exploiting state-of-the-art information technologies to enhance GIC’s ability to be the leading global long-term investment firm. We aim to provide users with empowering and transformational capabilities, and to create an inclusive, innovative and integrated work environment.

Infrastructure Cybersecurity & Resilience (ICR)

Our mission is to fortify GIC's infrastructure and cybersecurity capabilities by embedding security and resilience into everything we do, providing stable, secure and dependable services and solutions.The individual will be part of the Cybersecurity Assurance & Defence (CSAD) team and will play a key role in strengthening the firm’s security posture through proactive vulnerability management, adversarial attack simulation planning, and continuous improvement of security. The individual will serve as a control owner, driving threat prioritization, root cause analysis, and cross-team collaboration to remediate and prevent recurrence of vulnerabilities.

What impact can you make in this role?

The Security pillar engineers the identity, access, privileged access, cryptography and security platforms that protect GIC's people, systems and data. Beyond identity and cryptography, it owns the engineering of GIC's core cyber security tooling, from endpoint, email and network controls to data protection, application security and AI security. It works closely with Cyber Defence, Governance and Risk, and every technology team across GIC.

As the Security Engineering lead, you will lead GIC's cyber security and identity and access management (IAM) engineering across twelve security capability domains. You will set the strategy, build and lead high-performing teams, and deliver security platforms that are robust, scalable and easy for the business to use, moving GIC steadily towards a zero trust model.

What will you do as the Security Engineering Lead / what security domains will you own?

• Endpoint and workload protection: engineer and run endpoint detection and response, server and workload protection, and mobile threat defence.
• Email security and user awareness: deliver email threat protection and phishing simulation and awareness training.
• Vulnerability management: lead enterprise vulnerability scanning, prioritisation and remediation tooling across on-premises and cloud.
• Security operations (SIEM, XDR, SOAR, MDR): build the detection, analytics, automation and managed detection and response platforms that Cyber Defence relies on.
• Threat intelligence and external threat monitoring: integrate commercial and open-source intelligence, and external attack surface and threat monitoring, into detection and response.
• Malware analysis and forensics: provide sandboxing, malware analysis and digital forensics capabilities for incident response.
• Network security (NDR, NIPS, sandboxing, web gateway): engineer network detection and response, intrusion prevention, network sandboxing and secure web gateway controls.
• Data loss prevention and data protection: deliver DLP, digital rights management, database activity monitoring, data security posture management and data access governance.
• Encryption: set standards and deliver platforms for data encryption, including file and email encryption, alongside PKI, keys and secrets management.
• Archiving and records retention: engineer compliant archiving and retention platforms for communications and records, in line with regulatory requirements.
• Application and software supply chain security: embed software composition, static and dynamic testing, artefact curation and web application and API protection into the software delivery lifecycle.
• AI security: secure in-house AI assets through guardrails, AI gateways and AI-specific monitoring, and defend against AI-enabled attackers.

What qualifications or skills should you possess in this role?

• Typically 18+ years in cybersecurity or infrastructure, including at least 8 years leading security engineering teams.
• Deep expertise in identity and access management, including IdP / SSO, identity governance and PAM platforms (e.g., Microsoft Entra ID, Okta, SailPoint, CyberArk or equivalents).
• Strong understanding of cryptography, PKI, secrets management and cloud security.
• Broad command of the security tooling landscape across the twelve domains above, with the judgement to rationalise vendors, avoid overlap and integrate platforms into a coherent architecture.
• Proven record of leading enterprise-scale security transformations from strategy to delivery.
• Familiarity with security frameworks such as NIST CSF and ISO 27001.
• Excellent leadership and executive communication, with credibility across technical and business audiences.
• Professional certifications such as CISSP or CISM.
• Experience in financial services or another highly regulated industry.
• Experience shaping post-quantum cryptography or identity threat detection and response (ITDR) strategies.

Work at the Point of Impact
We need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.

Flexibility at GIC
At GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.

GIC is an equal opportunity employer
As an employer, we passionately believe every individual brings with them unique diversity of thought and perspectives to meaningfully enrich perspectives of GIC teams to drive competitive performance. An inclusive environment yields exceptional contribution.