VP, Cyber Risk Governance

Eames Consulting; Singapore; On-site; SGD 250,000 - 400,000; Full time

Job summary

Eames Consulting Group is seeking a VP, Cyber Risk Governance for a leading financial institution in APAC. This is governance and oversight, not hands-on tech; you will set standards, drive assurance outcomes, and embed risk and controls mindset.

You will own the governance framework across APAC, engage auditors/regulators, assess maturity, address gaps, and collaborate with stakeholders to sustain audit-ready posture.

Qualifications

• Strong background in cyber risk management, IT/security governance, risk and controls, or technology audit.
• Governance and oversight mindset: setting standards and interpreting risk, rather than hands-on technical work.
• Familiarity with APAC regulatory and compliance requirements across multiple jurisdictions.
• Experience representing the business to auditors or regulators and driving issues to resolution.
• Excellent stakeholder management and communication skills to influence senior leaders.
• Approximately ten to twelve years of relevant experience.
• Certifications such as CISSP, CISA, CRISC, CGEIT are advantageous.

Responsibilities

• Own and evolve the cybersecurity governance framework, policies and controls across multiple business units and jurisdictions in APAC.
• Act as senior point of contact for external auditors and regulators on cyber and information security matters, closing out findings and keeping the business audit-ready year-round.
• Assess cyber risk and controls maturity across the region, identify gaps, and drive pragmatic, risk-based improvements.
• Track and interpret APAC regulatory requirements (e.g. BNM, RBI and equivalent regimes) and translate them into practical governance standards.
• Partner with technology, risk, legal and compliance stakeholders, and engage senior regional leadership to embed a strong governance culture.
• Build cyber governance capability across the business through structured upskilling and regular forums that keep teams current on policy and regulatory change.

Skills

Cyber risk management

IT/security governance

Risk & controls framework

Regulatory engagement

Stakeholder management

Auditing and assurance

Governance mindset

Job description

A leading financial institution is looking for a VP, Cyber Risk Governance to lead cybersecurity governance, risk and controls oversight across its APAC footprint. This is a governance and oversight role, not a hands‑on technical one: you’ll set the standards, drive assurance outcomes, and build a strong risk and controls mindset across the business.

What you’ll do

• Own and evolve the cybersecurity governance framework, policies and controls across multiple business units and jurisdictions in APAC.
• Act as the senior point of contact for external auditors and regulators on cyber and information security matters, closing out findings and keeping the business audit‑ready year‑round.
• Assess cyber risk and controls maturity across the region, identify gaps, and drive pragmatic, risk‑based improvements.
• Track and interpret APAC regulatory requirements (e.g. BNM, RBI and equivalent regimes) and translate them into practical governance standards.
• Partner with technology, risk, legal and compliance stakeholders, and engage senior regional leadership to embed a strong governance culture.
• Build cyber governance capability across the business through structured upskilling and regular forums that keep teams current on policy and regulatory change.

What you’ll bring

• Strong background in cyber risk management, IT/security governance, risk and controls, or technology audit, ideally including financial services exposure (banking an advantage, but strong non-FI candidates with the right governance exposure will also be considered).
• A governance and oversight mindset: comfortable setting and enforcing standards and interpreting risk, rather than a purely hands‑on technical profile.
• Familiarity with APAC regulatory and compliance requirements across more than one jurisdiction.
• A track record of representing the business to auditors or regulators and driving issues through to resolution.
• Strong stakeholder management and communication skills, with the ability to influence senior leaders across a matrixed, multi‑market organisation.
• Approximately ten to twelve years of relevant experience is typical for this level, though candidates with less can be considered if the profile is right.
• Relevant certifications (e.g. CISSP, CISA, CRISC, CGEIT) are an advantage.