Total 45 Director/C-Level Legal / Public / Security job vacancies

JJ Consulting Services is a recruitment firm and preferred partner for multinational companies expanding in Asia. Our consultants bring deep industry and functional expertise, delivering top professional and staffing solutions to clients and candidates. Our Client is an established company in Singapore, who is seeking to recruit a Chief Information Security Officer.

Job Summary

The Chief Information Security Officer (CISO) leads the development and implementation of comprehensive information security strategies and policies, ensuring compliance with regulatory requirements and aligning cybersecurity initiatives with organizational goals.

Responsibilities

• Lead the development and execution of cybersecurity strategies and action plans to secure executive support and drive organizational security posture
• Establish and enforce information security goals, policies, standards, and procedures aligned with whole-of-government cybersecurity directives
• Cultivate a culture of cybersecurity risk assessment and risk acceptance among stakeholders, end users, and ICT professionals
• Ensure organizational compliance with whole-of-government cybersecurity policies and standards through continuous monitoring and enforcement
• Review and endorse information security initiatives, developing risk management and mitigation plans to address emerging threats
• Advise management on selecting and deploying appropriate cybersecurity solutions and technologies to protect organizational assets
• Align IT operations and needs with strategic cybersecurity directions mandated by whole-of-government frameworks
• Implement change management processes to adapt cybersecurity measures in response to evolving threat landscapes

Required competencies and certifications

• Degree in Computer Science, Information Systems, Engineering, or equivalent
• Minimum 10 years of management experience in information security, with working knowledge of ICT operations, security policies, and procedures
• Strong interpersonal and stakeholder management skills to collaborate with cross-functional teams in formulating and monitoring security policies
• Ability to work effectively with multidisciplinary teams to institute and oversee security policies and procedures

Preferred competencies and qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Other Information

• EA Licence No.: 12C6207
• JJ Consulting Services

Applicants are invited to send a MS Word resume to jobs@jjconsulting.com.sg stating position applied for, present/expected salaries, and earliest available date. We thank all applicants in advance and regret that only shortlisted candidates will be notified.

---

Job scope

• Provide legal support on commercial contracts and project-related agreements, including drafting, reviewing, and negotiating terms to protect the company’s interests.
• Advise business teams on regulatory, compliance, and corporate matters associated with project execution and operational activities.
• Manage legal disputes, claims, and external counsel engagements, and support the resolution of contentious matters when they arise.
• Develop internal legal processes, conduct stakeholder training, and work collaboratively across departments to strengthen governance and risk management.

Job Requirements

• At least a Bachelor of Law with at least 6 years of relevant legal experience in private practice and/or in-house roles
• Strong background in contract law, commercial negotiations, and legal risk management, preferably within the construction, engineering, or infrastructure sectors.
• Sound understanding of applicable laws and regulatory requirements in Singapore, with experience handling dispute resolution and compliance matters.

To apply, please include the following details inside your CV for faster processing:

• Reasons for leaving each past & current employment
• Salary drawn for each past & current employment
• Expected Salary
• Earliest availability date

Loh Puay Hwee David

EA License | 24C2215

EA Registration Number | R1766892

The incumbent will be managing team members in SG/Cyber Technology Centre (Malaysia)/Batam Technology Centre (Indonesia) and responsible for defining and overseeing the organization’s application security architecture, ensuring alignment with target architectures and modern development practices.

WHAT YOU’LL BE DOING:

1. Strategic Oversight of Security Architecture

• Define, design, and implement the target application security architecture in line with organizational goals and industry/regulatory standards.
• Establish a comprehensive application security strategy, ensuring seamless integration into enterprise architecture and technology roadmaps.
• Conduct architectural reviews to identify risks and recommend mitigation strategies, focusing on secure and scalable solutions.

2. CI/CD Pipeline Security

• Lead the integration of security controls into CI/CD pipelines, ensuring automated detection and remediation of vulnerabilities.

3. Secure Software Development Lifecycle (SDLC)

• Develop and enforce secure development guidelines, ensuring security is incorporated at every stage of the SDLC.
• Provide leadership in threat modelling, secure coding practices, and software code quality management across development teams.
• Work with application teams to prioritize security requirements, balancing business objectives with technical risks.

4. Vulnerability Management and Mitigation

• Oversee the overall strategy for SAST, DAST, to identifying and remediating vulnerabilities.
• Ensure timely resolution of identified issues, coordinating efforts across development, QA, and DevOps teams.
• Maintain and communicate detailed metrics and dashboards on the security posture of applications and pipelines.

5. Cross-Functional Collaboration

• Partner with application teams to align security architecture with business needs and project timelines.
• Act as the primary liaison between technical teams and executive leadership, effectively conveying security risks and architectural priorities.

WE ARE LOOKING FOR SOMEONE WITH | YOU WILL HAVE:

• Bachelor’s degree of computer science, Information Security, or a related field. A Master’s degree would be an added advantage.
• Information Systems Security professional certifications, such as CISSP, CSSLP, CEH, OSCP or CREST.
• At least 15 years of experience in cybersecurity, with a focus on application security, security architecture, and secure development practices.
• Proven expertise in designing and implementing security controls within CI/CD pipelines in Agile and DevOps environments.
• Demonstrated success in defining and overseeing secure application architectures for cloud-native and hybrid environments.
• Deep understanding of secure software development lifecycle (SDLC) methodologies and best practices.
• A team-player with systematic problem-solving approach, and have sense of ownership and drive.
• Must have strong people skill to lead a team effectively and demonstrable experience of working at the most senior levels of large and complex organizations.
• Excellent interpersonal skills and stakeholders management.
• Always have customer in mind when dealing with any situations/projects/deliverables.
• Interprets customer needs, assesses requirements and identifies solutions to non-standard requests.
• Able to negotiate with, influence and engage others in complex and conflicting situations across multiple parties to drive a positive outcome.
• Good communication skills and the communication network of the incumbent is expected to be internally within the enterprise (80%) and external with Vendors and Service Providers (20%).

A highly experienced and strategic Project Director to join our senior management team. The PD will play a pivotal role in overseeing and driving the successful execution of our projects.

Role Responsibilities:

• Lead and oversee the entire project lifecycle from initiation to completion, ensuring projects are delivered on time, within budget, and to the highest quality standards.
• Make strategic decisions and providing leadership and direction to project managers to implement those decision.
• Develop and implement project strategies, objectives, and plans in alignment with company goals.
• Coordinate and collaborate with senior management, clients, contractors, and other stakeholders to ensure effective communication and project alignment.
• Manage project risks, issues, and change control processes, ensuring proactive mitigation strategies are in place.
• Ensure compliance with all contractual, regulatory, and company requirements.
• Oversee project performance, including financial management, resource allocation, and progress tracking.
• Foster a culture of continuous improvement, innovation, and excellence within the project team.
• Provide leadership, mentorship, and development opportunities to project team members.

Role Requirements:

• Bachelor's degree in Civil & Structural Engineering, Construction Management or a related field, recognized by PE Board or Registered Resident Engineer.
• Minimum 15 years of related working experience in building and infrastructure projects, preferably with an established construction firm managing sizeable projects exceeding $80m.
• At least 10 years’ experience in managing design and construction teams.
• At least 10 years’ experience in managing design and construction teams for Projects in similar scale and complexity.
• Experience in Pharmaceutical / Cleanroom / Data Centre projects preferred.
• Extensive experience in a senior project management role, with a proven track record of successfully delivering large-scale projects.
• Strong leadership and decision-making skills, with the ability to represent and make timely decisions.
• Excellent strategic thinking and problem-solving abilities.
• Exceptional communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.
• Demonstrated experience in risk management, financial management, and change control.
• Strong understanding of contractual, regulatory, and company requirements.
• Ability to foster a collaborative and inclusive team environment.

Senior/ Legal Director (Disputes & Team Leadership) (10+ PQE)

Interested applicants do reach out via email to claire@2nats.com (do not only apply through this job portal, TQ!)

About the Role

We are hiring an experienced lawyer to join as Senior/ Legal Director in-house, leading a small legal team supporting a regulated organisation with complex, high-stakes matters. This role suits a senior disputes lawyer who enjoys combining dispute strategy and court work, practical legal advisory, and people leadership, while partnering senior stakeholders to deliver clear, risk-balanced solutions.

You will report to the Chief Legal Officer and work closely with corporate and operational stakeholders on contentious matters, governance issues, and key organisational decisions.

Key Responsibilities

• Lead and mentor a small legal team: set priorities, supervise delivery, develop capability, and maintain high standards

• Oversee disputes and court strategy: early case assessment, evidence approach, submissions strategy, settlement options, and managing external counsel where needed

• Provide strategic legal advice: guide stakeholders on administrative, governance, and corporate matters with practical, solution-oriented recommendations

• Strengthen dispute avoidance and response: improve playbooks, templates, and internal processes to reduce escalation risk and drive consistency

• Partner across teams: translate legal risk into workable options and support confident decision-making

What We’re Looking For

• Admitted to the Singapore Bar with strong academic credentials

• 10+ years PQE with a strong foundation in disputes/litigation and confident advisory capability

• Demonstrated people leadership experience (managing, mentoring, developing talent)

• Strong judgment, drafting, and stakeholder management skills

• Comfortable handling sensitive matters under pressure with professionalism and discretion

How to Apply

Please share your CV and a short note outlining your PQE, disputes focus, and team management experience.
Interested applicants do reach out via email to claire@2nats.com (do not only apply through this job portal, TQ!)

Warm regards,

Claire Lin Xiuxin EA Licence No.: R1103711

2Nats (Nat & Nat Search Pte Ltd EA: 26C3281)

Email: claire@2nats.com  Website: https://2nats.com/ 

Linkedin: linkedin.com/in/clairelinxx/

About STTGDC

Be part of a global leader in data centre solutions

ST Telemedia Global Data Centres (STT GDC) is a data centre provider headquartered in Singapore, with a global footprint in major business markets across Singapore, the United Kingdom, Germany, Italy, India, Thailand, South Korea, Indonesia, Japan, the Philippines, Malaysia and Vietnam. We harness cutting-edge technology to deliver a comprehensive suite of world-class, scalable and flexible data centre solutions, including connectivity and support services, designed to meet the evolving colocation needs of today and tomorrow. By joining our team, you’ll be part of a dynamic, fast-growing industry that forms the cornerstone of today’s digital world.

Why STT GDC

STT GDC’s internal culture is built on creating a forward-thinking, socially responsible environment that ignites positive change. We empower our employees to thrive in a workplace defined by excellence, innovation and growth, where collaboration and creativity can flourish.

✨ Empathy-driven culture: We lead with compassion and understanding, fostering a supportive and inclusive environment that values your well-being and voice.

Our client is a pioneering, licensed digital bank and Fintech scale-up that serves as the essential bridge between traditional financial rigor and the future of digital assets. Backed by elite institutional powerhouses, they are institutionalizing the next generation of finance for the global digital economy.

With a high-performing team of 150+ professionals and an established security pod of 10 specialists, they have already built a formidable foundation. They are now looking for a visionary leader to move beyond maintenance and architect the next phase of their global security landscape.

You will report directly to the CEO, you will own the enterprise-wide security strategy for a platform that unifies fiat and crypto settlement. This isn’t just about standard defense; it’s about navigating the high-stakes intersection of institutional banking, real-time payments, and stablecoin infrastructure within cloud-native environments. You will be the definitive voice of security to the Board, C-suite, and global regulators.

Key Focus Areas:

• Strategic Leadership: Develop a comprehensive security framework that enables rapid business growth without compromising on risk appetite.
  
• Regulatory Excellence: Navigate a complex web of international financial regulations and global standards such as ISO 27001, NIST, and PCI-DSS.

• Operational Resilience: Oversee high-frequency vulnerability management, penetration testing, and a 24/7 incident response (CSIRT) function for a borderless, always-on banking network.

• Governance & Culture: Serve as the bridge between technical security initiatives and executive leadership, fostering a deep-rooted culture of cybersecurity awareness.

Who You Are:

We are seeking an executive who combines deep technical "hands-on" roots with sophisticated boardroom presence.

• Experience: 10-15+ years of strategic cybersecurity experience within Financial Services, Fintech, or Digital Assets.

• Leadership: A proven track record in a CISO or Senior Management capacity, specifically scaling high-growth environments or digital finance platforms from scratch.

• Education: Bachelor’s or Master’s degree in MIS, Fintech, Computer Science, or a related technical field.

• Certification: CISM is mandatory. Preferred credentials include Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor.

• Expertise: Deep understanding of end-to-end security architecture design and enterprise risk frameworks.

Why Join This Firm?

• Strategic Impact: Define the security standards for a firm processing billions in monthly volume at the forefront of financial innovation.

• Scale with Resources: Inherit a robust 10-person security team, allowing you to elevate from tactical management to high-level strategy immediately.

• Equity Upside: This role includes a stock option package, offering significant financial upside as the company continues to redefine global banking.

• Executive Visibility: Direct access to the CEO and frequent engagement with a Board of Directors comprised of global finance titans.

Interested applicants, you may send your CV to goal@artemishr.xyz
We will be in touch with the shortlisted candidate for an interview within 5 working days.

Artemis HR Pte Ltd
EA License: 23S1792

Job Description & Requirements

• Central-North location
• 5 days work week
• $7,500 - $13,000 + AWS & Variable bonus
• Excellent career progression
• Attractive employee welfare benefit
• Regional projects spanning from Singapore to China, Bhutan, and Cambodia.

About the Role:

Reports directly to the Managing Director. You are to serve as Qualified Person and manage a team of engineers to ensure safe structural design and excellent delivery of service to clients.

• Serve as Qualified Person (QP) and responsible for PE endorsement for projects assigned
• Responsible for the profitability and cost efficiency of your team
• Project coordination/management
• Lead projects and attend meetings
• Supervise and inspect construction works.
• Managing and supervising technical/site staff and administrative functions of the projects.
• Provide guidance and manage engineers in the team to ensure on-time and accurate delivery of service.
• Check critical design calculations and specifications of the project prior to approving all C&S related documents and drawings produced in the projects prior to submission to regulatory authorities.
• Able to be hands-on to carry out detailed analysis and design of civil, structural, and geotechnical works
• Able to be hands-on in preparing design calculation reports and structural drawings for authorities' submissions;
• Able to coordinate with various stakeholders such as clients, consultants, and contractors for projects

Knowledge & Skills:

• Degree in Civil/Structural Engineering or its equivalent
• Local design experience in C&S engineering work & conversant with Singapore Building Codes and Practices
• Familiarity with engineering software (e.g. Tedds, StaadPro, Prota, Etab) and submission procedures to regulatory authorities
• Strong report writing skills to prepare and furnish reports
• Registered with Singapore PE Board as Professional Engineer
• Willing to sign as signing QP

Interested applicants may apply for a confidential discussion. Alternatively, you can email your resume to hr@encasaasia.com or contact Sharon via WhatsApp at 90215726 (https://wa.me/+6590215726)

Encasa Asia Employment Services LLP

EA Licence No: 13C6898

• Exposure to latest technologies such as cloud security 
• High-impact role with autonomy to make key decision for security roadmap and strategy

About the company

Our client is one of the fastest growing company in this industry. They are looking for a leadership-caliber professional to spearhead their cybersecurity division and protect their digital infrastructure.

About the job

Strategic Leadership: Define and execute the long-term information security roadmap and governance frameworks based on international standards.

Operational Oversight: Manage the dedicated security team, focusing on real-time monitoring, threat detection, and rapid incident response.

Risk & Compliance: Lead comprehensive risk assessments and ensure all systems adhere to global data protection regulations and client-specific requirements.

Technical Validation: Coordinate regular security audits, including vulnerability scans and penetration testing, to ensure robust system defense.

Cross-Functional Integration: Partner with Engineering and IT departments to embed security protocols directly into the product development lifecycle.

Stakeholder Reporting: Act as the primary advisor to executive leadership regarding the organization’s security posture and emerging risk landscapes.

Skills and experience required

As a successful applicant, you will have at least 10 years of experience in Cyber Security. Proven track record in managing overall security team for 4 years is required for this role. Exposure to information security framework such as  ISO 27001 and NIST is required for this role. 

Experience in cloud security such as Azure or AWS will be highly preferred. 

Whats on offer
This is an excellent opportunity to grow together with one of the fastest growing company, 

To apply online please use the 'apply' function, alternatively you can reach me at https://www.linkedin.com/in/hoonteck-nologyrecruitment. (EA: 94C3609/ R1219669)

We are looking for a Client Delivery Director (Public Sector) to drive the successful delivery of large-scale technology programs within the Singapore public sector.

In this role, you will oversee end-to-end delivery across multiple projects—ensuring outcomes are delivered on time, within budget, and to the highest quality standards. You’ll work closely with senior stakeholders, lead multidisciplinary teams, and play a key role in shaping delivery strategy, client relationships, and long-term account growth.

What you'll be doing:

• Lead end-to-end delivery of large, complex technology programs, ensuring timelines, quality, and client satisfaction
• Build and manage strong relationships with senior public sector stakeholders, driving alignment and successful outcomes
• Oversee program financials, including budgets, cost of delivery, and profitability, while supporting account growth
• Lead, mentor, and grow high-performing delivery teams across project managers, architects, and technical leads
• Drive continuous improvement and digital transformation initiatives across cloud, data, and modern delivery practices

What we're looking for:

• 15+ years of experience in program or delivery management, handling large-scale, complex technology projects
• Strong experience working with Singapore Government / Public Sector projects (recent experience preferred)
• Proven track record managing multiple projects across the full software delivery lifecycle (SDLC)
• Experience in Agile delivery (Scrum, SAFe) and large transformation programs
• Good understanding of digital, cloud, and data-driven transformation initiatives
• Familiarity with Singapore Government platforms and environments (e.g., GCC, GDC, SingPass)

Work with senior stakeholders on large-scale, meaningful initiatives and lead high-impact programs shaping Singapore’s public sector digital landscape.

Reach out to Naveen at naveen.vasudevan@tangspac.com for a confidential discussion

Legal Strategy & Corporate Governance

- Architect and drive the group's overarching legal strategy, aligning legal priorities with long-term business objectives across

digital advertising, mobile application, and technology sectors

- Act as principal legal advisor to the Board of Directors, Group CEO, and C-suite leadership on all material legal, regulatory, and

corporate governance matters, providing commercially sound and risk-calibrated counsel

- Design and continuously refine the group's enterprise-wide legal governance framework, embedding robust internal controls and

accountability mechanisms across all business units, subsidiaries, and jurisdictions

- Proactively anticipate regulatory developments and emerging legal risks across target markets, translating complex legal landscapes

into clear, actionable strategic guidance for senior leadership

Complex Transaction Management & Commercial Legal Affairs

- Lead end-to-end legal structuring and execution of high-value commercial transactions, strategic partnerships, cross-border

investments, and multi-party platform agreements in both English and Chinese

- Represent the group's commercial interests across complex, multi-stakeholder negotiations involving institutional counterparties,

financial investors, and technology partners in Singapore, Greater China, and international markets

- Conduct rigorous legal due diligence on strategic investments, acquisition targets, and key vendor relationships, delivering

comprehensive risk assessments to inform executive decision-making

- Develop standardised contract governance frameworks, negotiation playbooks, and legal risk matrices to drive consistency and

commercial protection across the organisation

Regulatory Compliance & Risk Management

- Lead the group's multi-jurisdictional compliance programme across Singapore's PDPA, China's PIPL, GDPR, and jurisdiction-specific

advertising and technology regulations

- Establish a proactive regulatory intelligence function to monitor, interpret, and operationalise evolving legal and compliance

requirements across digital advertising, mobile applications, and data-driven marketing

- Develop and implement enterprise-wide risk management policies to proactively identify, assess, and mitigate legal, regulatory, and

commercial risks across business operations

Digital Advertising & App Compliance

- Provide authoritative legal guidance on digital advertising standards, influencer marketing agreements, and promotional campaign

compliance across Singapore, China, and regional markets

- Oversee App Store and digital platform compliance for the group's mobile application products, ensuring ongoing alignment with Apple

App Store, Google Play, and applicable regulatory requirements across target markets

- Advise on platform-specific advertising policies and evolving regulatory requirements in programmatic advertising and data-driven

marketing environments

Financing & Investor Relations Legal Support

- Provide legal counsel on equity and debt financing arrangements, investor agreements, and capital-raising activities to support the

group's business expansion strategy

- Structure and negotiate investment agreements, shareholder arrangements, and strategic alliance documentation with institutional

investors and financial counterparties

- Support cross-border M&A activities and strategic corporate initiatives from a legal and compliance perspective, leveraging

experience with complex multi-party transaction environments

Thought Leadership & Stakeholder Engagement

- Represent the group in engagements with regulatory authorities, industry associations, and external legal bodies across Singapore

and Greater China

- Contribute to industry research, legal publications, and policy consultation, enhancing the group's profile and influence in key

markets

- Build and maintain strategic relationships with top-tier external law firms, regulatory advisors, and professional service providers

across relevant jurisdictions

Legal Team Leadership

- Build, lead, and mentor the in-house legal team, establishing a high-performance culture centred on business enablement and risk

management excellence

- Drive the digitalisation of legal operations through legal technology adoption to improve efficiency and data-driven decision-making

across the organisation

---

Requirements

- Master's Degree or above in Law, Business Administration, or equivalent discipline from a recognised institution; MBA or Executive

MBA from a globally recognised university is a strong advantage

- Minimum 8 years of progressive legal experience at leading law firms or in senior in-house legal roles, with a strong track record

of managing complex, high-value commercial transactions and multi-stakeholder negotiations

- Deep expertise in cross-border commercial transactions, investment structuring, and regulatory compliance across Singapore and

Greater China markets

- Extensive experience drafting, negotiating, and executing complex commercial agreements in both English and Chinese across

multi-jurisdictional business environments

- Published research contributions or active participation in industry associations and legal forums, demonstrating thought leadership

and professional standing within the legal community

- Strong command of both English and Mandarin Chinese in written and spoken form, essential for managing cross-border legal

documentation and stakeholder communications across bilingual business environments

- Holder of a valid legal practitioner licence in a recognised jurisdiction; candidates with a PRC Bar qualification and demonstrated

cross-border legal experience are welcome to apply

- Prior experience in technology, digital media, internet advertising, or mobile application industries is advantageous

About Gain City

At Gain City, we deliver expertise and quality solutions in air-conditioning, home appliances and consumer electronics. Established in 1981, Gain City is a trusted household name in Singapore. We take pride in our strong customer focus, innovative spirit, and commitment to service excellence. With a dynamic workforce and a network of stores and service centres island wide, we offer a vibrant and growth-oriented environment where employees are empowered to thrive, take ownership and make a real impact.

About the Role

We are seeking an experienced and detail-oriented Compliance Director / Assistant Director / Senior Manager to lead the Compliance team in support of the Gain City group of companies.

In this role, you will not only ensure that operations comply with internal policies and regulatory requirements, but also enforce discipline, accountability, and integrity across all business units. You will take a hands-on approach in conducting checks, audits, and investigations, ensuring that company resources, time, and processes are not misused or compromised.

This position requires a leader who can combine strong analytical and investigative skills with sound judgment, ensuring that Gain City upholds the highest standards of professionalism and ethical conduct. You will play a critical role in promoting a culture of transparency, compliance, and fairness throughout the organisation.

Key Responsibilities

• Lead the Compliance Department, ensuring full compliance with all regulatory, corporate, and internal governance requirements.
• Establish and enforce compliance policies, frameworks, and audit procedures to ensure adherence across all departments and business entities.
• Conduct regular and surprise checks to ensure proper usage of company assets, accurate reporting of operational activities.
• Investigate suspected cases of non-compliance, including falsification, misuse of company property, or breach of policies, and recommend appropriate corrective actions.
• Collaborate with department heads and HR to strengthen internal controls and ensure consistent enforcement of company rules and disciplinary standards.
• Identify high-risk areas within operations and develop targeted compliance audit plans to address these risks effectively.
• Review and analyse audit findings, identify trends, and assist business units in implementing effective preventive and corrective measures.
• Drive awareness and ownership of compliance culture through communication, training, and engagement initiatives across all levels of staff.
• Leverage technology and digital tools to improve compliance monitoring, reporting, and data analysis for greater transparency and efficiency.
• Prepare compliance reports and recommendations for management and follow up to ensure timely implementation of corrective actions.

Qualifications and Requirements

• A minimum of a bachelor’s degree
• A minimum of 10 years of relevant working experience
• Strong investigative mindset, attention to detail, and high integrity.
• Experience in operational environments (retail, logistics, or service sectors) preferred.
• Ability to work independently, manage sensitive issues discreetly, and enforce accountability with professionalism. Excellent interpersonal and communication skills, with the ability to influence and guide senior stakeholders

What We Offer

At Gain City, we are committed to the growth and development of our employees. You will be offered various learning and development opportunities and a collaborative, forward-thinking and growth-focused work environment to thrive in your career. You will also receive a comprehensive benefits package.

Join Our Team

If you have a strong background in compliance, audit and risk management, and are looking for a role that makes an impact, apply now to be a part of our growing team!

Note

• Only shortlisted candidates will be notified

Key Responsibilities

• Provide administrative and secretarial support to the Director of Operations
• Manage calendar, schedule meetings, and arrange appointments
• Coordinate meeting logistics (venue, materials, invitations)
• Assist in preparing and formatting documents, reports, and presentations
• Handle emails, correspondence, and basic communication when required
• Maintain proper filing systems (physical and digital)
• Record basic meeting notes and follow up on simple action items
• Support general administrative duties and ad-hoc tasks

Requirements

• Minimum Diploma in any discipline
• Basic administrative or secretarial experience preferred
• Proficient in Microsoft Office (Word, Excel, Outlook)
• Good organizational and communication skills
• Able to follow instructions and work independently
• Bilingual in English and Chinese is an advantage

OVERVIEW

To develop, implement, and maintain the company’s enterprise-wide information security strategy and framework, ensuring that all systems, data, and processes are secure, resilient, and compliant with regulatory and industry standards. The CISO provides strategic guidance on information security, leads risk management efforts for cyber and information security, and ensures preparedness against emerging threats.

The CISO oversees information security, cybersecurity, data protection, vulnerability management, incident response, and security governance across the organisation. The role spans all business units, technology platforms, and operational processes, including coordination with regulators, auditors, and external partners.

KEY RESPONSIBILITIES

Strategic Objectives

• Develop and implement a comprehensive enterprise information security strategy aligned with business objectives and risk appetite.

• Ensure compliance with applicable laws, regulations, and standards related to information security.

• Provide strategic guidance to the Senior Management on emerging threats, vulnerabilities, and security innovations.

• Promote a culture of cybersecurity awareness and best practices across the organization.

Operational Objectives

• Identify, assess, and mitigate information security risks across all systems and processes.

• Oversee the design and execution of vulnerability assessments, penetration tests, and security audits.

• Lead the development and management of security policies, procedures, and incident response plans.

• Ensure timely reporting of security incidents, breaches, and risk assessments to senior management and regulators.

REQUIREMENTS

• Bachelor’s or Master’s degree in Management Information Systems, Fintech, Information Security, Computer Science, or a related technical field.

• 15+ years of hands-on and strategic experience in information security and cybersecurity within the financial services industry (including FinTech, payments, and digital assets).

• Proven executive leadership experience, including operating as a Chief Information Security Officer (CISO) or in a senior managerial capacity.

• Extensive knowledge of international financial regulations, regulatory compliance, and global industry standards (ISO 27001, NIST, PCI-DSS).

• Mandatory professional certification in CISM (Certified Information Security Manager). Additional certifications in Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor are highly preferred.

• Proven track record in launching or scaling digital finance platforms, FinTech, or cloud-native environments from scratch, with a strong understanding of end-to-end security architecture design and 24/7 incident response (CSIRT).

• Strong strategic and leadership skills, with the ability to build enterprise risk frameworks and communicate complex security initiatives to the Board, C-suite, and relevant regulatory bodies.