Director, Cybersecurity Policy, Risk & Compliance

Careerally

  • Singapore
  • Permanent
  • Full-time
  • 12 days ago
  • Apply easily
Key Highlights:
  • Permanent Position
  • Opportunity to work with a dynamic, industry-leading company
  • Up to $19,000 + Bonus + comprehensive Benefits package
We are hiring a strategic cybersecurity and risk leader to shape and implement enterprise-wide policies and governance frameworks for a critical public sector environment in Singapore.This is a leadership opportunity that involves designing and operationalizing cybersecurity and technology risk standards across a large-scale regulated ecosystem. You'll lead a team in delivering control design, policy adherence, and stakeholder engagement to elevate sector-wide cybersecurity maturity.The ideal candidate brings deep experience in cybersecurity governance, policy implementation, and regulatory engagement, particularly within complex or regulated environments.Responsibilities:
  • Lead the development and lifecycle management of cybersecurity and technology risk policies, standards, and control libraries across a multi-entity public sector ecosystem.
  • Engage with senior-level stakeholders to contextualize and align policies with operational realities.
  • Oversee control design and attestation processes, ensuring robust compliance tracking and deviation management.
  • Drive policy awareness and risk culture initiatives through education campaigns, self-assessment programs, and governance innovation.
  • Analyze evolving risks and proactively update frameworks to reflect new technologies, threats, and regulatory shifts.
  • Build strong relationships across CIO, CISO, and governance functions in both central and decentralized environments.
  • Lead and manage a high-performing team of governance professionals.
Requirements:
  • Min 15 years of experience in cybersecurity, risk and compliance within large enterprises or public sector environments.
  • Deep familiarity with IM8, NIST CSF, COBIT, ISO27001, or equivalent frameworks.
  • Proven ability to translate policy into actionable control programs across diverse stakeholder groups.
  • Strong domain knowledge in cybersecurity governance, technology risk, and regulatory alignment.
  • Recognized certifications such as CISSP, CISA, CRISC, CGEIT, or equivalent.
  • Exceptional leadership and stakeholder management skills, comfortable with influencing across matrixed, senior-level environments.
Interested applicants, please submit updated resume in MS format via the Apply button.Position and remuneration will be commensurate with skills and experience.
We regret that only short-listed candidates will be contacted.Careerally Pte Ltd | EA Licence: 24C2215
EA Registration No: R1874897

Careerally