VP, Security Governance

SUMITOMO MITSUI BANKING CORPORATION SINGAPORE BRANCH; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Sumitomo Mitsui Banking Corporation Singapore Branch is seeking a Vice President, Security Governance to oversee cybersecurity governance, risk management, and regulatory compliance across APAC operations. You will drive policies, controls, and training to raise security maturity.

The role leads audits, coordinates with Legal, Compliance and IT teams, and guides third-party risk management and post-quantum cryptography initiatives, requiring deep experience and professional certifications.

Qualifications

• Bachelor's degree in information technology or cybersecurity.
• 12+ years of professional experience with at least 8 years in cyber risk management and information security governance.
• Proven experience managing audits and regulatory compliance in technology, cybersecurity, and information security.
• Certifications such as CISSP, CISA, CRISC, CGEIT are highly desirable.

Responsibilities

• Develop and maintain security governance standards, policies, procedures, and guidelines aligned with corporate policies and regulatory mandates.
• Monitor adherence to cybersecurity controls and governance practices across all business units.
• Partner with IT and business units to assess and standardize cyber risk and information security management processes.
• Identify gaps and implement improvements to enhance security posture and risk management.
• Act as trusted advisor on security governance and ensure projects include appropriate risk mitigation and compliance controls.
• Provide governance for Post-Quantum Cryptography (PQC) initiative and drive resilience.
• Oversee security audits, regulatory engagements, and remediation tracking.
• Collaborate with Cybersecurity, Risk Management, IT Operations, Legal, and Compliance teams to integrate governance across initiatives.

Skills

Cyber risk management

Information security governance

Audit management

Regulatory compliance

Stakeholder engagement

Third-Party Risk Management

Cryptographic Key Management

AI risk management

Education

Bachelor's degree in information technology or cybersecurity

Job description

The Vice President, Security Governance

The Vice President, Security Governance is responsible for ensuring effective cybersecurity governance, risk management and compliance across the bank's operations in APAC, including its franchises and subsidiaries. This role supports audit activities, drives adherence to cybersecurity policies and controls, steers initiatives to strengthen security maturity, and leads training programs to promote best practices within the organization and its franchises.

Job Responsibilities

Governance and Controls Management

• Develop, maintain, and enhance comprehensive security governance standards, policies, procedures, and guidelines aligned with corporate policies, regulatory mandates, and industry-leading frameworks.
• Monitor adherence to cybersecurity controls and governance practices across all business units.
• Partner with business units and IT teams to assess, refine, and standardize cyber risk and information security management processes to ensure consistency and operational excellence.
• Identify process/capabilities gaps and inefficiencies within IT and IS frameworks; recommend and implement pragmatic improvements to enhance security posture and risk management.
• Act as a trusted advisor and consultant to stakeholders on security governance matters, ensuring IT projects and initiatives incorporate appropriate risk mitigation and compliance controls.
• Provide security governance and strategic oversight for Post-Quantum Cryptography (PQC) initiative, establish the relevant security framework and standards, and drive the bank's transition towards long-term cryptographic resilience.
• Conduct security risk assessments for third-party engagements to strengthen the bank's security posture and resilience across its third-party ecosystem.

Audit Support

• Oversee cybersecurity audits, assurance activities, and regulatory engagements; manage responses to audit findings and regulatory inquiries with thorough documentation and knowledge management.
• Coordinate and support internal audit activities related to security controls across the enterprise and its franchises.
• Prepare and manage audit documentation, respond to audit findings, and track remediation plans to closure.

Stakeholder Collaboration

• Collaborate with the wider Cybersecurity, Risk Management, IT Operations, Legal, and Compliance teams to integrate governance and controls across technology initiatives.
• Engage with franchise leadership to support governance initiatives and foster strong communication channels.

Candidate Requirements:

• Bachelor's degree in information technology, Cybersecurity, or a related field.
• Minimum 12 years of professional experience with at least 8 years focused on cyber risk management and information security governance, preferably in a financial institution.
• Deep expertise in risk management frameworks, IT governance, cybersecurity standards, and compliance requirements across multiple jurisdictions.
• Proven experience managing audits and regulatory compliance in technology, cybersecurity, and information security domains.
• Good knowledge across diverse IT and security domains, including but not limited to, Cryptographic Key Management, Third-Party Risk Management, and AI Risk Management.
• Exceptional interpersonal, analytical, and written communication skills with the ability to influence and engage stakeholders at all levels.
• Demonstrated problem-solving skills and ability to work effectively under pressure and tight deadlines.
• Self-motivated, meticulous, and a proactive team player with a positive attitude and strong sense of responsibility.
• Ability to manage multiple priorities in a fast-paced, evolving environment.
• Relevant professional certifications (e.g. CISSP, CISA, CRISC, CGEIT) and knowledge of CRI are highly desirable.