An established organisation with complex technology and operational environments is seeking an experienced Chief Information Security Officer (CISO) to lead its enterprise cybersecurity function.
This is a senior leadership appointment with responsibility for shaping the organisation's security direction, strengthening cyber resilience and ensuring that cybersecurity capabilities evolve alongside business and technology priorities.
Key Responsibilities:
- Define and execute the organisation's cybersecurity strategy, ensuring alignment with business priorities, technology transformation and evolving threat landscapes.
- Provide strategic advice to senior management and board stakeholders on cybersecurity risks, organisational readiness, regulatory developments and investment priorities.
- Lead the cybersecurity function, overseeing security governance, risk management, architecture, operations and incident response capabilities.
- Strengthen security controls and resilience across enterprise IT, operational technology and business-critical infrastructure.
- Establish and enhance cybersecurity policies, frameworks and assurance programmes in accordance with applicable regulatory requirements and industry standards.
- Drive cybersecurity transformation initiatives, including security architecture improvements, technology modernisation and the adoption of security-by-design principles.
- Oversee cyber threat management, vulnerability assessments, incident preparedness, response and recovery capabilities.
- Partner with technology, engineering and business stakeholders to embed appropriate security measures into systems, processes and operational environments.
- Manage cybersecurity budgets, external service providers and third-party security risks, ensuring effective allocation of resources.
- Establish meaningful cybersecurity metrics and reporting mechanisms to provide management with visibility over risk exposure, control effectiveness and programme maturity.
- Build and develop a capable cybersecurity leadership team while promoting security awareness and accountability across the organisation.
Requirements:
- Degree in Information Technology, Computer Science, Engineering, Cybersecurity or a related discipline.
- Approximately 10-15 years of relevant experience in cybersecurity, information security or technology risk, including substantial leadership responsibilities.
- Proven experience leading enterprise cybersecurity programmes within complex, large-scale or highly regulated environments.
- Strong understanding of cybersecurity governance, security architecture, threat management, incident response and operational resilience.
- Exposure to OT/industrial cybersecurity, critical infrastructure or mission-critical technology environments would be highly advantageous.
- Demonstrated ability to lead multidisciplinary teams, manage senior stakeholders and drive organisation-wide security initiatives.
- Strong commercial judgement, executive presence and the ability to translate technical risks into practical business decisions.
- Relevant professional certifications such as CISSP, CISM, CISA or CRISC would be advantageous.
To apply:
If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at ************* for a discussion. Due to anticipated high volume of applications and confidential nature of this search, we regret to inform that only shortlisted candidates will be notified.
Reg: R1876389
Lic: 16S8060