VP, Security Governance & Risk Strategy

Kerry Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Kerry Consulting is seeking an experienced cybersecurity leader to oversee governance, risk and assurance capabilities within a highly regulated environment. You will establish and maintain a robust cyber governance framework, manage security risks, and drive continuous improvements across the enterprise security programme.

Reporting to the CISO, you will lead GRC, partner with technology, risk, audit and business leaders to strengthen cyber resilience and drive enterprise-wide security

Qualifications

• Degree in Information Security or related discipline.
• Minimum 10 years in cybersecurity governance, risk, or IT assurance.
• Proven experience leading GRC functions or enterprise security governance teams.
• Experience with regulated industries and large organisations is desirable.
• Recent leadership experience in managing a team.

Responsibilities

• Develop and maintain enterprise cybersecurity governance policies and control frameworks.
• Ensure alignment with regulatory obligations and industry best practices.
• Lead risk assessments and security assurance activities including audits.
• Oversee remediation and governance maturity improvements across the organisation.
• Provide strategic guidance to technology and business stakeholders on cyber risk.

Skills

Cybersecurity leadership

GRC knowledge

Regulatory compliance

Stakeholder management

Audit coordination

Education

Bachelor’s degree in Information Security

Degree in Computer Science/Engineering

Tools

ISO 27001

NIST CSF

COBIT

CIS Controls

Job description

Kerry Consulting is seeking an experienced cybersecurity leader to oversee governance, risk and assurance capabilities within a highly regulated environment. You will establish and maintain a robust cyber governance framework, manage security risks, and drive continuous improvements across the enterprise security programme.

Reporting to the CISO, you will lead GRC, partner with technology, risk, audit and business leaders to strengthen cyber resilience and drive enterprise-wide security