Total 5 Director/C-Level information analyst job vacancies in Legal / Public / Security category in The Philippines

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

JJ Consulting Services is a recruitment firm and preferred partner for multinational companies expanding in Asia. Our consultants bring deep industry and functional expertise, delivering top professional and staffing solutions to clients and candidates. Our Client is an established company in Singapore, who is seeking to recruit a Chief Information Security Officer.

Job Summary

The Chief Information Security Officer (CISO) leads the development and implementation of comprehensive information security strategies and policies, ensuring compliance with regulatory requirements and aligning cybersecurity initiatives with organizational goals.

Responsibilities

• Lead the development and execution of cybersecurity strategies and action plans to secure executive support and drive organizational security posture
• Establish and enforce information security goals, policies, standards, and procedures aligned with whole-of-government cybersecurity directives
• Cultivate a culture of cybersecurity risk assessment and risk acceptance among stakeholders, end users, and ICT professionals
• Ensure organizational compliance with whole-of-government cybersecurity policies and standards through continuous monitoring and enforcement
• Review and endorse information security initiatives, developing risk management and mitigation plans to address emerging threats
• Advise management on selecting and deploying appropriate cybersecurity solutions and technologies to protect organizational assets
• Align IT operations and needs with strategic cybersecurity directions mandated by whole-of-government frameworks
• Implement change management processes to adapt cybersecurity measures in response to evolving threat landscapes

Required competencies and certifications

• Degree in Computer Science, Information Systems, Engineering, or equivalent
• Minimum 10 years of management experience in information security, with working knowledge of ICT operations, security policies, and procedures
• Strong interpersonal and stakeholder management skills to collaborate with cross-functional teams in formulating and monitoring security policies
• Ability to work effectively with multidisciplinary teams to institute and oversee security policies and procedures

Preferred competencies and qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Other Information

• EA Licence No.: 12C6207
• JJ Consulting Services

Applicants are invited to send a MS Word resume to jobs@jjconsulting.com.sg stating position applied for, present/expected salaries, and earliest available date. We thank all applicants in advance and regret that only shortlisted candidates will be notified.

---

Our client is a pioneering, licensed digital bank and Fintech scale-up that serves as the essential bridge between traditional financial rigor and the future of digital assets. Backed by elite institutional powerhouses, they are institutionalizing the next generation of finance for the global digital economy.

With a high-performing team of 150+ professionals and an established security pod of 10 specialists, they have already built a formidable foundation. They are now looking for a visionary leader to move beyond maintenance and architect the next phase of their global security landscape.

You will report directly to the CEO, you will own the enterprise-wide security strategy for a platform that unifies fiat and crypto settlement. This isn’t just about standard defense; it’s about navigating the high-stakes intersection of institutional banking, real-time payments, and stablecoin infrastructure within cloud-native environments. You will be the definitive voice of security to the Board, C-suite, and global regulators.

Key Focus Areas:

• Strategic Leadership: Develop a comprehensive security framework that enables rapid business growth without compromising on risk appetite.
  
• Regulatory Excellence: Navigate a complex web of international financial regulations and global standards such as ISO 27001, NIST, and PCI-DSS.

• Operational Resilience: Oversee high-frequency vulnerability management, penetration testing, and a 24/7 incident response (CSIRT) function for a borderless, always-on banking network.

• Governance & Culture: Serve as the bridge between technical security initiatives and executive leadership, fostering a deep-rooted culture of cybersecurity awareness.

Who You Are:

We are seeking an executive who combines deep technical "hands-on" roots with sophisticated boardroom presence.

• Experience: 10-15+ years of strategic cybersecurity experience within Financial Services, Fintech, or Digital Assets.

• Leadership: A proven track record in a CISO or Senior Management capacity, specifically scaling high-growth environments or digital finance platforms from scratch.

• Education: Bachelor’s or Master’s degree in MIS, Fintech, Computer Science, or a related technical field.

• Certification: CISM is mandatory. Preferred credentials include Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor.

• Expertise: Deep understanding of end-to-end security architecture design and enterprise risk frameworks.

Why Join This Firm?

• Strategic Impact: Define the security standards for a firm processing billions in monthly volume at the forefront of financial innovation.

• Scale with Resources: Inherit a robust 10-person security team, allowing you to elevate from tactical management to high-level strategy immediately.

• Equity Upside: This role includes a stock option package, offering significant financial upside as the company continues to redefine global banking.

• Executive Visibility: Direct access to the CEO and frequent engagement with a Board of Directors comprised of global finance titans.

Interested applicants, you may send your CV to goal@artemishr.xyz
We will be in touch with the shortlisted candidate for an interview within 5 working days.

Artemis HR Pte Ltd
EA License: 23S1792

OVERVIEW

To develop, implement, and maintain the company’s enterprise-wide information security strategy and framework, ensuring that all systems, data, and processes are secure, resilient, and compliant with regulatory and industry standards. The CISO provides strategic guidance on information security, leads risk management efforts for cyber and information security, and ensures preparedness against emerging threats.

The CISO oversees information security, cybersecurity, data protection, vulnerability management, incident response, and security governance across the organisation. The role spans all business units, technology platforms, and operational processes, including coordination with regulators, auditors, and external partners.

KEY RESPONSIBILITIES

Strategic Objectives

• Develop and implement a comprehensive enterprise information security strategy aligned with business objectives and risk appetite.

• Ensure compliance with applicable laws, regulations, and standards related to information security.

• Provide strategic guidance to the Senior Management on emerging threats, vulnerabilities, and security innovations.

• Promote a culture of cybersecurity awareness and best practices across the organization.

Operational Objectives

• Identify, assess, and mitigate information security risks across all systems and processes.

• Oversee the design and execution of vulnerability assessments, penetration tests, and security audits.

• Lead the development and management of security policies, procedures, and incident response plans.

• Ensure timely reporting of security incidents, breaches, and risk assessments to senior management and regulators.

REQUIREMENTS

• Bachelor’s or Master’s degree in Management Information Systems, Fintech, Information Security, Computer Science, or a related technical field.

• 15+ years of hands-on and strategic experience in information security and cybersecurity within the financial services industry (including FinTech, payments, and digital assets).

• Proven executive leadership experience, including operating as a Chief Information Security Officer (CISO) or in a senior managerial capacity.

• Extensive knowledge of international financial regulations, regulatory compliance, and global industry standards (ISO 27001, NIST, PCI-DSS).

• Mandatory professional certification in CISM (Certified Information Security Manager). Additional certifications in Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor are highly preferred.

• Proven track record in launching or scaling digital finance platforms, FinTech, or cloud-native environments from scratch, with a strong understanding of end-to-end security architecture design and 24/7 incident response (CSIRT).

• Strong strategic and leadership skills, with the ability to build enterprise risk frameworks and communicate complex security initiatives to the Board, C-suite, and relevant regulatory bodies.

Responsibilities

• Produce cyber security strategies and work plan, policies, standards and guidelines
• Support digitalisation planning and aligning with ICT security strategy goals and policy baselines.
• Perform regular Gap analysis.
• Oversee ICT security matters (approving and tracking ICT security work plan and resourcing, monitoring performance in security indicators and risk acceptance decisions).
• Regular reviews of all ICT systems across different operating environments, the systems’ security design, implementation and operations.
• Conduct Cybersecurity risk assessment and acceptance processes at the management level.
• Review, consult and endorse risk management and mitigation plans from project teams.
• Advise on cyber security solutions and technologies to be deployed suitable to business operations and aligned with WOG-wide advisories and practices.
• Ensure compliance to the defined security policies, standards and guidelines.
• Create and execute end user security awareness programmes
• Establish defined processes for Threat and Incident Management.
• Ownership of security incident response workshops and exercises (table-top exercises, simulation and drills)
• Lead investigation and management of ICT security incidents.

Requirement

• Degree in Computer Science, Information Systems, Engineering or a related Technology based education.
• Minimum 5 years of information security management experience
• Skilled in evaluating the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues.
• Able to identify on-premises and cloud-specific cybersecurity risks and threats as well as potential violations in on-premises or cloud environments
• Able to collaborate with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users.
• Demonstrate skills to thoroughly assess cybersecurity risks/threats impact
• Solid grasp of ICT operations, security policies, business processes and the relationship between them.
• Knowledge or experience in Infrastructure as Code (IaC) tools such as Terraform and Ansible, including their application in maintaining and automating secure on-premises and cloud environments.
• Strong understanding of insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks.
• Strong understanding of compliance requirements
• Good interpersonal and partner/ executive leadership skills.
• CISSP/ CISM/ CISA certifications are advantageous.

Ethos Search Associates Pte. Ltd.

EA Licence No: 13C6655

EA Reg No: R1988580 Jacky Chong