Total 8 Director/C-Level information security analyst job vacancies in Legal / Public / Security category

About the Role

We are seeking an experienced senior manager to lead our information security team, combining strong hands-on technical expertise as well as people management experience in the information security domain. They will lead a team to manage. They will lead a team to manage Security Operations (SecOps), encompassing threat detection and response, incident management, vulnerability management, security monitoring, and continuous improvement of defensive capabilities.

WHAT YOU’LL BE DOING:

Infrastructure Security

• Manage end-to-end infrastructure security activities, such as vulnerability management, servers’ security monitoring & hardening, infrastructure as a code, etc.

• Design and/or review infrastructure security architecture proposal for various security-driven initiatives for on-premises and cloud environment.

Cloud Security

• Manage compliancy level of AIA SG cloud security assets based on ongoing regular scanning according to the defined threshold.

• Evaluate the security aspect of new cloud-based solutions proposed by application development team, infrastructure team, or business users.

• Manage various cloud security BAU activities, such as assets provisioning, deprovisioning, hardening, etc.

Identity and Access Management

• Supervise the AIA-SG IAM Manager and their team performing IAM Governance functions for the Business Unit. 

Cyber Security & Security Incident Handling

• Work with Security Operation Centre (SOC) Team to ensure secure protection of AIA SG environment.

• Deploy new cyber security initiatives and roll out the platform together with SOC Team.

• Point of contact for security incident handling and investigation, starting from incident is identified, handled, and resolved.

Security Advisory

• Provide feasible security recommendations or guidance based on queries / changes initiated by application development team, infrastructure team, or business users.

• Facilitate challenging security conversations and provide acceptable solutions where IT standards are contradicting with business demands to achieve acceptable business solutions without sacrificing security and compliance aspects.

People Development

• Supervise 8 team members.

• Drive a continues Learning and Development program for the team members through inhouse and external training programs.

• Lead promotion of activities to increase information security within your teams to embed and continuously improve adherence to good practice.

WHAT WE ARE LOOKING FOR:

• University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

• Minimum 15 years of experiences of information security domain, especially in Application Security, Infrastructure Security and Cloud Security.

• Preferable to have security infrastructure operation background with hands-on experiences of designing and/or reviewing application security or infrastructure security. 

• Hands-on information security experience in the Multiple Cloud Environment (SaaS, PaaS and IaaS) and Cyber Incident management.

• Certifications related to security architecture or Cloud Security is preferable, such as CCSP, Azure DevOps certification, Azure Solutions Architect certification, etc.

• Preferably a holder of one or more of the following information security and audit qualifications: CISSP, CISA, CRISC, CCSP.

• Good knowledge of latest security technologies and cyber landscape in a highly regulated industry.

• Good interpersonal and communication skill.

• Strong leadership with a high integrity, proactive mindset, and strong ownership.

• Working experiences in insurance / banking / IT industry is preferred.

• Infrastructure Security: Windows, Linux, AS400.

• Security Advisory and Assessment, and incident management.

JJ Consulting Services is a recruitment firm and preferred partner for multinational companies expanding in Asia. Our consultants bring deep industry and functional expertise, delivering top professional and staffing solutions to clients and candidates. Our Client is an established company in Singapore, who is seeking to recruit a Chief Information Security Officer.

Job Summary

The Chief Information Security Officer (CISO) leads the development and implementation of comprehensive information security strategies and policies, ensuring compliance with regulatory requirements and aligning cybersecurity initiatives with organizational goals.

Responsibilities

• Lead the development and execution of cybersecurity strategies and action plans to secure executive support and drive organizational security posture
• Establish and enforce information security goals, policies, standards, and procedures aligned with whole-of-government cybersecurity directives
• Cultivate a culture of cybersecurity risk assessment and risk acceptance among stakeholders, end users, and ICT professionals
• Ensure organizational compliance with whole-of-government cybersecurity policies and standards through continuous monitoring and enforcement
• Review and endorse information security initiatives, developing risk management and mitigation plans to address emerging threats
• Advise management on selecting and deploying appropriate cybersecurity solutions and technologies to protect organizational assets
• Align IT operations and needs with strategic cybersecurity directions mandated by whole-of-government frameworks
• Implement change management processes to adapt cybersecurity measures in response to evolving threat landscapes

Required competencies and certifications

• Degree in Computer Science, Information Systems, Engineering, or equivalent
• Minimum 10 years of management experience in information security, with working knowledge of ICT operations, security policies, and procedures
• Strong interpersonal and stakeholder management skills to collaborate with cross-functional teams in formulating and monitoring security policies
• Ability to work effectively with multidisciplinary teams to institute and oversee security policies and procedures

Preferred competencies and qualifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)

Other Information

• EA Licence No.: 12C6207
• JJ Consulting Services

Applicants are invited to send a MS Word resume to jobs@jjconsulting.com.sg stating position applied for, present/expected salaries, and earliest available date. We thank all applicants in advance and regret that only shortlisted candidates will be notified.

---

To lead and ensure that security management practices across the region are implemented and

maintained to ensure the security of people, assets and operations of DP World within the region.

• To ensure security compliance of the BUs in the region to their respective applicable mandatory,

voluntary and client specific security compliance requirements. These requirements must be identified

and the list to be maintained.

• To plan and support implementation of compliance standards like ISPS Code, ISO 28000, TAPA etc. that

are required or planned as improvement by the BUs within the region.

• To ensure that security awareness becomes a culture within the region, using security campaigns,

training, outreach, and awareness sessions, either in person to locally based colleagues or remotely

through delegated security managers regionally

• To ensure all travellers in the region are apprised of security risk factors and implement measures and

mitigation techniques appropriate to the specific location

• To maintain close contact with regional peers within DP World and to build effective relationships with

regional and local agencies who can assist the collection of security information and the response to an

incident

• Undertake Risk Assessments and provide advice on security matters and compliance for new projects.

• Undertake security reviews and/or audits within the region as per frequency agreed with Group Security

and Regional Head.

• Lead, support and project manage on all aspects of security for new businesses and acquisitions.

• Support and where assigned lead security systems projects within the region.

• Support the integration of new businesses to the global security management system requirements.

• Prepare and submit security reports for the region to Group Security and Regional Head in the agreed

template(s) and frequency.

OTHER

• Applicable if role has direct or indirect reports - responsible for the management and leadership of an

engaged team, promoting collaboration and ensuring that each is developed and evaluated against goals

and objectives which are aligned, specific, measurable, attainable yet challenging, realistic and time

bound.

• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive

behaviours in harmony with DP World's Principles, values and culture; ensuring the highest level of safety

is applied in all activities; understanding and following DP World's Code of Conduct and Ethics policies.

• Perform other related duties as assigned

Our client is a pioneering, licensed digital bank and Fintech scale-up that serves as the essential bridge between traditional financial rigor and the future of digital assets. Backed by elite institutional powerhouses, they are institutionalizing the next generation of finance for the global digital economy.

With a high-performing team of 150+ professionals and an established security pod of 10 specialists, they have already built a formidable foundation. They are now looking for a visionary leader to move beyond maintenance and architect the next phase of their global security landscape.

You will report directly to the CEO, you will own the enterprise-wide security strategy for a platform that unifies fiat and crypto settlement. This isn’t just about standard defense; it’s about navigating the high-stakes intersection of institutional banking, real-time payments, and stablecoin infrastructure within cloud-native environments. You will be the definitive voice of security to the Board, C-suite, and global regulators.

Key Focus Areas:

• Strategic Leadership: Develop a comprehensive security framework that enables rapid business growth without compromising on risk appetite.
  
• Regulatory Excellence: Navigate a complex web of international financial regulations and global standards such as ISO 27001, NIST, and PCI-DSS.

• Operational Resilience: Oversee high-frequency vulnerability management, penetration testing, and a 24/7 incident response (CSIRT) function for a borderless, always-on banking network.

• Governance & Culture: Serve as the bridge between technical security initiatives and executive leadership, fostering a deep-rooted culture of cybersecurity awareness.

Who You Are:

We are seeking an executive who combines deep technical "hands-on" roots with sophisticated boardroom presence.

• Experience: 10-15+ years of strategic cybersecurity experience within Financial Services, Fintech, or Digital Assets.

• Leadership: A proven track record in a CISO or Senior Management capacity, specifically scaling high-growth environments or digital finance platforms from scratch.

• Education: Bachelor’s or Master’s degree in MIS, Fintech, Computer Science, or a related technical field.

• Certification: CISM is mandatory. Preferred credentials include Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor.

• Expertise: Deep understanding of end-to-end security architecture design and enterprise risk frameworks.

Why Join This Firm?

• Strategic Impact: Define the security standards for a firm processing billions in monthly volume at the forefront of financial innovation.

• Scale with Resources: Inherit a robust 10-person security team, allowing you to elevate from tactical management to high-level strategy immediately.

• Equity Upside: This role includes a stock option package, offering significant financial upside as the company continues to redefine global banking.

• Executive Visibility: Direct access to the CEO and frequent engagement with a Board of Directors comprised of global finance titans.

Interested applicants, you may send your CV to goal@artemishr.xyz
We will be in touch with the shortlisted candidate for an interview within 5 working days.

Artemis HR Pte Ltd
EA License: 23S1792

About STTGDC

Be part of a global leader in data centre solutions

ST Telemedia Global Data Centres (STT GDC) is a data centre provider headquartered in Singapore, with a global footprint in major business markets across Singapore, the United Kingdom, Germany, Italy, India, Thailand, South Korea, Indonesia, Japan, the Philippines, Malaysia and Vietnam. We harness cutting-edge technology to deliver a comprehensive suite of world-class, scalable and flexible data centre solutions, including connectivity and support services, designed to meet the evolving colocation needs of today and tomorrow. By joining our team, you’ll be part of a dynamic, fast-growing industry that forms the cornerstone of today’s digital world.

Why STT GDC

STT GDC’s internal culture is built on creating a forward-thinking, socially responsible environment that ignites positive change. We empower our employees to thrive in a workplace defined by excellence, innovation and growth, where collaboration and creativity can flourish.

✨ Empathy-driven culture: We lead with compassion and understanding, fostering a supportive and inclusive environment that values your well-being and voice.

OVERVIEW

To develop, implement, and maintain the company’s enterprise-wide information security strategy and framework, ensuring that all systems, data, and processes are secure, resilient, and compliant with regulatory and industry standards. The CISO provides strategic guidance on information security, leads risk management efforts for cyber and information security, and ensures preparedness against emerging threats.

The CISO oversees information security, cybersecurity, data protection, vulnerability management, incident response, and security governance across the organisation. The role spans all business units, technology platforms, and operational processes, including coordination with regulators, auditors, and external partners.

KEY RESPONSIBILITIES

Strategic Objectives

• Develop and implement a comprehensive enterprise information security strategy aligned with business objectives and risk appetite.

• Ensure compliance with applicable laws, regulations, and standards related to information security.

• Provide strategic guidance to the Senior Management on emerging threats, vulnerabilities, and security innovations.

• Promote a culture of cybersecurity awareness and best practices across the organization.

Operational Objectives

• Identify, assess, and mitigate information security risks across all systems and processes.

• Oversee the design and execution of vulnerability assessments, penetration tests, and security audits.

• Lead the development and management of security policies, procedures, and incident response plans.

• Ensure timely reporting of security incidents, breaches, and risk assessments to senior management and regulators.

REQUIREMENTS

• Bachelor’s or Master’s degree in Management Information Systems, Fintech, Information Security, Computer Science, or a related technical field.

• 15+ years of hands-on and strategic experience in information security and cybersecurity within the financial services industry (including FinTech, payments, and digital assets).

• Proven executive leadership experience, including operating as a Chief Information Security Officer (CISO) or in a senior managerial capacity.

• Extensive knowledge of international financial regulations, regulatory compliance, and global industry standards (ISO 27001, NIST, PCI-DSS).

• Mandatory professional certification in CISM (Certified Information Security Manager). Additional certifications in Blockchain Security, Data Privacy, or ISO 27001 Lead Auditor are highly preferred.

• Proven track record in launching or scaling digital finance platforms, FinTech, or cloud-native environments from scratch, with a strong understanding of end-to-end security architecture design and 24/7 incident response (CSIRT).

• Strong strategic and leadership skills, with the ability to build enterprise risk frameworks and communicate complex security initiatives to the Board, C-suite, and relevant regulatory bodies.

Reolink, a leader in intelligent visual technologyfor homes and businesses, was founded in 2009 by a group of engineers with astrong commitment to and passion for smarter security solutions.

Our products are now trusted by millions of users acrossmore than 110 countries and regions worldwide. Building on this trust, wecontinue expanding our presence and bringing our innovations to more marketsaround the globe. Reolink remains committed to delivering advanced, reliable,and user‑centric solutions that empower people to protect whatmatters most.

Key Highlights:

• 5 Work Days, 8.30am-5.30pm / 9am-6pm
• Office Near to Kaki Bukit MRT, Singapore
• Medical Benefits Provided
• Entitled to Yearly Bonus & Performance Bonus

The Chief Security Officer (CSO) is responsible forshaping and leading the company’s global security vision and strategy. Thisrole oversees all aspects of cybersecurity, information security, physicalsecurity, and enterprise risk management across the organization. As a keymember of the executive leadership team, the CSO partners closely with theCEO, Board of Directors, and cross‑functional leaders to safeguard thecompany’s assets, ensure regulatory compliance, and enable secure businessgrowth.

Key Responsibilities

1. Strategy & Leadership

• Develop, implement, and continuously refine the company’s enterprise-wide security strategy, multi‑year roadmap, and annual budget.
• Advise the CEO and Board of Directors on security risks, emerging threats, and strategic security decisions.
• Foster a security-first culture and drive organization‑wide security awareness programs.
• Lead, mentor, and grow a high-performing global security team, promoting operational excellence and professional development.

2. Information Security & Cybersecurity

• Establish and maintain a comprehensive cybersecurity defense ecosystem, including threat intelligence, SOC operations, incident response, red/blue team exercises, and vulnerability management.
• Oversee cloud, application, data, and endpoint security strategies to ensure robust protection across the technology stack.
• Lead the response to major security incidents, ensuring rapid containment, communication, remediation, and post‑incident lessons learned.

3. Physical Security & Operational Security

• Develop and oversee physical security programs for global offices, data centers, warehouses, and critical facilities.
• Design and maintain Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP), including regular testing and scenario-based drills.

4. Compliance & Risk Management

• Ensure continuous compliance with applicable laws, regulations, and industry standards (e.g., GDPR, ISO 27001, SOC 2, PCI DSS).
• Lead internal and external security audits, address findings, and implement long-term remediation plans.
• Build and manage a robust enterprise risk management framework, evaluating risks and tracking mitigation progress across all business units.

5. Third-Party & Supply Chain Security

• Develop and enforce a supplier and third‑party security risk assessment framework to manage security posture across key partners, vendors, and service providers.

Job Qualifications

1. Security Skillset & Core Competencies

• Deep expertise in cybersecurity frameworks, cloud security models, and enterprise security architecture.
• Strong knowledge of security standards and regulations (e.g., NIST, ISO 27001, GDPR).
• Proficiency with major security tools and platforms (e.g., IDS/IPS, WAF, EDR, SIEM).
• Proven experience in security incident response, crisis management, and post‑incident forensics.

2. Relevant Experience & Technical Expertise

• 10+ years of experience in security roles, with 5+ years in senior leadership (e.g., Security Director, Head of Security).
• Demonstrated success in building and scaling security programs within fast‑growing technology companies.
• Hands-on experience with major cloud platforms (AWS, Azure, GCP) and scripting languages (e.g., Python, Bash).
• Familiarity with security solutions including Nessus, Splunk, and container/cloud-native security (e.g., Docker, Kubernetes security).

3. Certifications

• Bachelor’s degree or higher in Computer Science, Information Security, or a related discipline.
• Recognized security certifications such as CISSP, CISM, CISA, or equivalent are preferred.
• Strong knowledge of security technologies, risk management practices, and compliance frameworks.

Responsibilities

• Produce cyber security strategies and work plan, policies, standards and guidelines
• Support digitalisation planning and aligning with ICT security strategy goals and policy baselines.
• Perform regular Gap analysis.
• Oversee ICT security matters (approving and tracking ICT security work plan and resourcing, monitoring performance in security indicators and risk acceptance decisions).
• Regular reviews of all ICT systems across different operating environments, the systems’ security design, implementation and operations.
• Conduct Cybersecurity risk assessment and acceptance processes at the management level.
• Review, consult and endorse risk management and mitigation plans from project teams.
• Advise on cyber security solutions and technologies to be deployed suitable to business operations and aligned with WOG-wide advisories and practices.
• Ensure compliance to the defined security policies, standards and guidelines.
• Create and execute end user security awareness programmes
• Establish defined processes for Threat and Incident Management.
• Ownership of security incident response workshops and exercises (table-top exercises, simulation and drills)
• Lead investigation and management of ICT security incidents.

Requirement

• Degree in Computer Science, Information Systems, Engineering or a related Technology based education.
• Minimum 5 years of information security management experience
• Skilled in evaluating the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues.
• Able to identify on-premises and cloud-specific cybersecurity risks and threats as well as potential violations in on-premises or cloud environments
• Able to collaborate with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users.
• Demonstrate skills to thoroughly assess cybersecurity risks/threats impact
• Solid grasp of ICT operations, security policies, business processes and the relationship between them.
• Knowledge or experience in Infrastructure as Code (IaC) tools such as Terraform and Ansible, including their application in maintaining and automating secure on-premises and cloud environments.
• Strong understanding of insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks.
• Strong understanding of compliance requirements
• Good interpersonal and partner/ executive leadership skills.
• CISSP/ CISM/ CISA certifications are advantageous.

Ethos Search Associates Pte. Ltd.

EA Licence No: 13C6655

EA Reg No: R1988580 Jacky Chong