VP, Cyber Security Risk Management

Eames Consulting Group; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Eames Consulting Group in Singapore is seeking a Vice President to lead technology and cyber security risk oversight within a well-established financial services firm. This independent assurance role reviews and challenges risk practices owned by the first line, rather than operating controls.

You will work with risk governance committees, escalate issues, and contribute to evolving risk frameworks, policies and standards while collaborating with technology and security teams.

Qualifications

• Eight to twelve years in technology or cyber security risk management, assurance or audit.
• Strong background in data security is essential.
• Experience with recognised control frameworks such as ISO 27001 or NIST.
• Ability to engage senior and technical audiences with credibility.

Responsibilities

• Provide independent review and challenge of cyber security risk assessments and control testing carried out by first line teams.
• Assess the effectiveness of data security controls, including encryption, access management, data loss prevention and data classification.
• Evaluate control design and effectiveness across the technology estate, covering cloud, infrastructure and application security.
• Partner with technology and security teams to strengthen data protection standards and control frameworks.
• Escalate key risk exposures, control weaknesses and emerging issues to senior management and risk governance committees.
• Support oversight of cyber security incidents, including root cause review and tracking of remediation.
• Contribute to the ongoing development of risk frameworks, policies and standards.

Skills

Cyber security risk management

Data security

ISO 27001/NIST

Stakeholder management

Job description

A second line risk function within a well-established financial services organisation in Singapore is looking for a VP to join its technology and cyber security risk oversight team. This is an independent assurance role: you will review, challenge and report on the cyber security and data risk practices owned by the first line, rather than operating those controls yourself.

What you’ll do

• Provide independent review and challenge of cyber security risk assessments and control testing carried out by first line teams
• Assess the effectiveness of data security controls, including encryption, access management, data loss prevention and data classification
• Evaluate control design and effectiveness across the technology estate, covering cloud, infrastructure and application security
• Partner with technology and security teams to strengthen data protection standards and control frameworks
• Escalate key risk exposures, control weaknesses and emerging issues to senior management and risk governance committees
• Support oversight of cyber security incidents, including root cause review and tracking of remediation
• Contribute to the ongoing development of risk frameworks, policies and standards

What you’ll bring

• Eight to twelve years in technology or cyber security risk management, assurance or audit, ideally within a regulated financial services environment
• A strong background in data security is essential. Candidates currently working in a first line (practitioner) cyber or data security role, with a genuine interest in moving into second line risk oversight.
• Working knowledge of a recognised control framework such as ISO 27001 or NIST
• Strong stakeholder management and communication skills, with the ability to engage senior and technical audiences with equal credibility