VP, Enterprise Cybersecurity Engineering

WhiteCrow Research Pvt. Ltd.; Singapore; On-site; SGD 260,000 - 520,000; Full time

Job summary

WhiteCrow Research Pvt. Ltd. is seeking a VP, Enterprise Cybersecurity Engineering for a premier financial assets firm; you will lead strategic cybersecurity initiatives, align security with business goals, and design scalable security architectures across cloud platforms.

The role requires 10+ years in cyber security, deep experience with EDR/NDR/SIEM/SOAR/XDR, CTEM, and strong communication with stakeholders; you will mentor teams and influence risk posture globally.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related discipline.
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security.
• Proven experience in implementing and operationalizing enterprise cybersecurity platforms, including: Security Operations Tooling: EDR, NDR, SIEM, SOAR, XDR, Threat Intelligence Platforms (TIPs).
• Email Security: Secure email gateways (SEG) and Integrated Cloud Email Security (ICES), anti-phishing and anti-malware controls, DMARC/DKIM/SPF authentication, and email threat detection and response.
• Continuous Threat Exposure Management (CTEM): Attack surface assessment, vulnerability assessment, data aggregation and risk-based prioritization, threat exposure management, and attack simulation/validation (e.g., BAS).
• Experience operationalizing a CTEM program or equivalent risk-based exposure management framework preferred.
• Working knowledge of cloud security controls and reference architectures across AWS, Azure, and Google Cloud Platform.
• Scripting and coding skills, with proficiency in Java, Python, C#, or similar programming languages, and good understanding of REST API's and JSON.
• Ability to produce detailed documentation, including design diagrams and process flows.
• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator.
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous.

Responsibilities

• Identifying and recommending improvement areas in existing enterprise security architecture to address evolving cybersecurity threats.
• Aligning and balancing business requirements with cybersecurity, information, and technology requirements, based on the organization's risk appetite.
• Evaluating, performing proof-of-value/proof-of-concept, designing, building, and implementing enterprise-class cybersecurity systems.
• Developing integrated security operating models and documentation to ensure operational efficiency, scalability, and sustainability.
• Acting as a domain expert and trusted partner in Cyber Security & Resilience, while working closely with stakeholders in Technology Group and other business groups on cybersecurity engineering-related matters.

Skills

Java

Python

C#

REST APIs

JSON

Documentation

Team player

Excellent communicator

Education

Bachelor's degree in Information Technology/Computer Science

Tools

EDR

NDR

SIEM

SOAR

XDR

TIPs

SEG

ICES

DMARC

DKIM

SPF

Job description

We are global talent research, insight, and sourcing specialists with offices in the UK, USA, Singapore, Malaysia, Hong Kong, Dubai, and India. Our international reach has helped us to understand and penetrate specialist markets at a global level. In addition to this, our service is also extended to complement our client’s in-house talent acquisition teams.

About the client

Our client is a leading global investment institution focused on managing and growing financial assets through a disciplined, long-term investment approach. With a presence across more than 40 countries, it maintains a diversified portfolio spanning public equities, fixed income, private equity, real estate, and alternative investments. Our client focuses on preserving long-term value, maintaining purchasing power across global markets, and generating sustainable returns through prudent risk management and strategic asset allocation.

About the role

• You'll be empowered to be at the top of your game by providing strategic partnership, and innovative technology solutions that supports our client vision of being a tech-driven, global, long-term investment firm.

As an VP, Enterprise Cybersecurity Engineering, you will be responsible for...

• Identifying and recommending improvement areas in existing enterprise security architecture to address evolving cybersecurity threats.
• Aligning and balancing business requirements with cybersecurity, information, and technology requirements, based on the organization's risk appetite.
• Evaluating, performing proof-of-value/proof-of-concept, designing, building, and implementing enterprise-class cybersecurity systems.
• Developing integrated security operating models and documentation to ensure operational efficiency, scalability, and sustainability.
• Acting as a domain expert and trusted partner in Cyber Security & Resilience, while working closely with stakeholders in Technology Group and other business groups on cybersecurity engineering-related matters.

What you already have...

• Bachelor's degree in Information Technology, Computer Science, or a related discipline.
• At least 10 years of relevant experience preferably in financial services or asset management industries, with minimum 7 years in Cyber Security or Information Security.
• Proven experience in implementing and operationalizing enterprise cybersecurity platforms, including:
• Security Operations Tooling: EDR, NDR, SIEM, SOAR, XDR, Threat Intelligence Platforms (TIPs).
• Email Security: Secure email gateways (SEG) and Integrated Cloud Email Security (ICES), anti-phishing and anti-malware controls, DMARC/DKIM/SPF authentication, and email threat detection and response.
• Continuous Threat Exposure Management (CTEM): Attack surface assessment, vulnerability assessment, data aggregation and risk-based prioritization, threat exposure management, and attack simulation/validation (e.g., BAS).
• Experience operationalizing a CTEM program or equivalent risk-based exposure management framework preferred.
• Working knowledge of cloud security controls and reference architectures across AWS, Azure, and Google Cloud Platform.
• Scripting and coding skills, with proficiency in Java, Python, C#, or similar programming languages, and good understanding of REST API's and JSON.
• Ability to produce detailed documentation, including design diagrams and process flows.
• Must be meticulous, versatile, and inquisitive, having strong attention to detail with an analytical mind and outstanding problem-solving skills.
• Desire to learn, working in a diverse environment, interacting with multiple teams and functions to support strategic goals. Be a good team player and excellent communicator.
• Professional qualification in information security, such as CISSP / CISM / CEH will be advantageous.