Head of Information Security

Role overview

This position is for a seasoned cybersecurity leader who can set the direction for an organisation’s information security function and ensure that critical assets remain protected while the business continues to grow. The role calls for a blend of strategic thinking, hands-on execution, and enough technical depth to make sound decisions and guide specialist teams.

Core responsibilities

• Build and steer a cybersecurity roadmap that supports business objectives.
• Translate organisational priorities into practical security programmes, balancing risk reduction, cost, and operational efficiency.
• Track emerging cyber threats, industry developments, and best practices, then turn them into actionable guidance.
• Shape, lead, and strengthen a high-performing cybersecurity team.
• Establish and maintain governance structures that support consistent security oversight across the organisation.
• Identify, assess, and manage risks affecting systems, infrastructure, applications, and data.
• Ensure compliance with applicable regulations, internal policies, and industry standards.
• Report security risks, programme progress, and key metrics to senior leadership.
• Oversee the implementation of security controls, tools, and technology initiatives.
• Maintain effective incident response and coordination during major security events.
• Continuously review the security environment and drive improvements to the overall security posture.
• Support secure adoption of new technologies and business change initiatives.
• Act as the main connection point between technical teams and business stakeholders.
• Influence senior management on security priorities, strategy, and investment decisions.
• Work closely with departments across the organisation to embed security into everyday processes.
• Lead hiring, capability building, coaching, and mentoring for cybersecurity professionals.
• Ensure the team has the right skills, tools, and support to operate effectively.
• Promote and sustain a strong organisation-wide security awareness culture.

Experience and knowledge required

• Extensive background in cybersecurity, information security, or technology risk leadership.
• Proven success in defining and delivering security strategies at an enterprise level.
• Strong executive presence and experience managing senior stakeholders.
• Good working knowledge of security frameworks, governance practices, and risk management principles.
• Enough technical understanding to advise on architecture, controls, and security operations.

Additional information

The role is based in Singapore and is a full-time, onsite position.

The hiring organisation is a well-established company looking for a leader who can protect critical information assets while enabling business growth.

No specific salary, vacancy count, start date, or application deadline was provided in the source.