VP, Cyber Risk Oversight & Data Security

Eames Consulting Group; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Eames Consulting Group in Singapore is seeking a Vice President to lead technology and cyber security risk oversight within a well-established financial services firm. This independent assurance role reviews and challenges risk practices owned by the first line, rather than operating controls.

You will work with risk governance committees, escalate issues, and contribute to evolving risk frameworks, policies and standards while collaborating with technology and security teams.

Qualifications

• Eight to twelve years in technology or cyber security risk management, assurance or audit.
• Strong background in data security is essential.
• Experience with recognised control frameworks such as ISO 27001 or NIST.
• Ability to engage senior and technical audiences with credibility.

Responsibilities

• Provide independent review and challenge of cyber security risk assessments and control testing carried out by first line teams.
• Assess the effectiveness of data security controls, including encryption, access management, data loss prevention and data classification.
• Evaluate control design and effectiveness across the technology estate, covering cloud, infrastructure and application security.
• Partner with technology and security teams to strengthen data protection standards and control frameworks.
• Escalate key risk exposures, control weaknesses and emerging issues to senior management and risk governance committees.
• Support oversight of cyber security incidents, including root cause review and tracking of remediation.
• Contribute to the ongoing development of risk frameworks, policies and standards.

Skills

Cyber security risk management

Data security

ISO 27001/NIST

Stakeholder management

Job description

Eames Consulting Group in Singapore is seeking a Vice President to lead technology and cyber security risk oversight within a well-established financial services firm. This independent assurance role reviews and challenges risk practices owned by the first line, rather than operating controls.

You will work with risk governance committees, escalate issues, and contribute to evolving risk frameworks, policies and standards while collaborating with technology and security teams.