Head of Cybersecurity and Infrastructure

Role Overview

We are looking for a seasoned Head of IT & Cybersecurity to spearhead the strategic planning, management, and enhancement of our organization's IT infrastructure and cybersecurity frameworks. This leadership position is responsible for ensuring secure and reliable technology operations encompassing end-user computing, networking, hybrid and cloud infrastructures, identity management, security operations, and governance.

Key Responsibilities

• Develop and implement comprehensive infrastructure strategies covering user devices, networks, data centers, and cloud platforms, optimizing for uptime, performance, security, and budget.
• Manage daily IT operations and service delivery to maintain exceptional system availability, user satisfaction, and vendor effectiveness.
• Own and evolve the cybersecurity strategy and operational model, including oversight of security architectures, threat and vulnerability assessment, incident response, and security monitoring.
• Advance robust detection and response capabilities to enhance organizational resilience against cyber threats.
• Establish and enforce security policies, standards, and governance structures aligned with regulatory frameworks such as PDPA, ISO 27001, and NIST.
• Conduct risk evaluations across infrastructure, cloud services, applications, and emerging technologies; monitor remediation efforts; report critical risks and indicators to senior leaders and the Board.
• Lead secure-by-design practices through architecture and design reviews, advocating for secure configurations, access controls, network segmentation, and hardened cloud deployments.
• Oversee third-party and vendor management processes, ensuring compliance with service level agreements and risk assessments, including remediation assistance for critical suppliers.
• Coordinate security audits, regulatory inspections, and internal assessments by providing necessary documentation, managing findings, and promoting continuous control improvements.
• Provide leadership to infrastructure, end-user support, and security teams, fostering a culture of accountability, professional development, and cross-functional collaboration.

Essential Qualifications and Experience

• Over 10 years of advancing experience in infrastructure management, cybersecurity, and technology risk, with recent roles involving leadership responsibilities.
• Comprehensive knowledge of network and cloud infrastructure operations, IT service management, and cybersecurity governance principles.
• Demonstrated success in directing security operations, vulnerability and incident management, and overseeing security operation centers or equivalent functions.
• Practical expertise with security architecture components such as IAM, endpoint protection, network security, WAF, EDR, and SIEM technologies within modern cloud and hybrid environments.
• Experience managing audits, regulatory inspections, and remediation initiatives, preferably within regulated sectors.

Additional Information

Applications are welcomed by submitting your CV or contacting Chen Yi for further discussion. Please note that only candidates shortlisted for consideration will be contacted due to the expected volume of responses.
Registration: R1876389
License: 16S8060