Head of Cyber Governance and Risk

Role Overview

This senior position is responsible for overseeing and strengthening enterprise cybersecurity governance, managing technology risks, and ensuring data protection throughout the organization. Reporting directly to the Chief Technology Officer, the role requires providing impartial guidance on cybersecurity strategy, governance frameworks, compliance adherence, and security architecture, while collaborating closely with both technology teams and business leadership.

Key Responsibilities

• Formulate and improve policies, governance, and security standards for enterprise-wide cybersecurity.
• Lead technology risk evaluations, review security architectures, and manage risk acceptance procedures.
• Oversee governance related to data protection, privacy regulations, and data classification initiatives.
• Supervise cybersecurity audits, handle regulatory interface, lead certification projects, and guide remediation efforts.
• Govern third-party security risks along with business continuity planning and incident management strategies.
• Create executive-level dashboards and deliver comprehensive reports on cyber risk posture to senior management.
• Develop and manage a proficient cybersecurity governance team while maintaining excellent stakeholder relationships across the business.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 12 years of professional experience in cybersecurity, technology risk management, or information security governance.
• In-depth understanding of standards and frameworks such as ISO 27001, NIST, PCI DSS, PDPA, and GDPR, along with enterprise security governance practices.
• Proven track record in leading security audits, managing regulatory compliance, and handling technology risk programs.
• Excellent communication abilities and stakeholder engagement skills capable of influencing senior executives.

Preferred Attributes

• Experience as a Chief Information Security Officer (CISO), Deputy CISO, or Head of Information Security, or readiness to assume such a role.
• Strong executive presence with demonstrated experience presenting cybersecurity strategies and risk issues to Boards and Executive Committees.
• Experience in interacting with regulatory bodies and Board of Directors is a significant advantage.