Chief Information Security Officer (CISO)

An established organisation with complex technology and operational environments is seeking an experienced Chief Information Security Officer (CISO) to lead its enterprise cybersecurity function.

This is a senior leadership appointment with responsibility for shaping the organisation's security direction, strengthening cyber resilience and ensuring that cybersecurity capabilities evolve alongside business and technology priorities.

Key Responsibilities:

• Define and execute the organisation's cybersecurity strategy, ensuring alignment with business priorities, technology transformation and evolving threat landscapes.
• Provide strategic advice to senior management and board stakeholders on cybersecurity risks, organisational readiness, regulatory developments and investment priorities.
• Lead the cybersecurity function, overseeing security governance, risk management, architecture, operations and incident response capabilities.
• Strengthen security controls and resilience across enterprise IT, operational technology and business-critical infrastructure.
• Establish and enhance cybersecurity policies, frameworks and assurance programmes in accordance with applicable regulatory requirements and industry standards.
• Drive cybersecurity transformation initiatives, including security architecture improvements, technology modernisation and the adoption of security-by-design principles.
• Oversee cyber threat management, vulnerability assessments, incident preparedness, response and recovery capabilities.
• Partner with technology, engineering and business stakeholders to embed appropriate security measures into systems, processes and operational environments.
• Manage cybersecurity budgets, external service providers and third-party security risks, ensuring effective allocation of resources.
• Establish meaningful cybersecurity metrics and reporting mechanisms to provide management with visibility over risk exposure, control effectiveness and programme maturity.
• Build and develop a capable cybersecurity leadership team while promoting security awareness and accountability across the organisation.

Requirements:

• Degree in Information Technology, Computer Science, Engineering, Cybersecurity or a related discipline.
• Approximately 10-15 years of relevant experience in cybersecurity, information security or technology risk, including substantial leadership responsibilities.
• Proven experience leading enterprise cybersecurity programmes within complex, large-scale or highly regulated environments.
• Strong understanding of cybersecurity governance, security architecture, threat management, incident response and operational resilience.
• Exposure to OT/industrial cybersecurity, critical infrastructure or mission-critical technology environments would be highly advantageous.
• Demonstrated ability to lead multidisciplinary teams, manage senior stakeholders and drive organisation-wide security initiatives.
• Strong commercial judgement, executive presence and the ability to translate technical risks into practical business decisions.
• Relevant professional certifications such as CISSP, CISM, CISA or CRISC would be advantageous.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [email protected] for a discussion. Due to anticipated high volume of applications and confidential nature of this search, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060