Secretlab Hiring! Full Time Head of Information Security in - Ricebowl

Secretlab is an international gaming chair brand seating over three million users worldwide, with our key markets in the United States, Europe and Singapore, where we are headquartered.

The Head of Information Security (HoIS) is responsible for establishing, leading, and continuously maturing the enterprise-wide information security, data protection, and cyber risk management program. This role provides strategic direction and executive oversight to ensure the confidentiality, integrity, and availability of information assets while enabling business growth, regulatory compliance, and market trust.

Reporting to the General Counsel, the HoIS serves as a strategic advisor to senior leadership, translating cyber and data risks into business and legal impact, and ensuring security-by-design is embedded across technology, product development, and operations. The role balances governance and risk leadership with pragmatic execution through strong delegation to specialist security managers.

Responsibilities

• Define and execute the enterprise information security and cyber risk strategy aligned with business objectives, legal obligations, and regulatory expectations
• Establish and oversee security governance, policies, standards, and metrics aligned with recognized frameworks (ISO 27001, NIST, SOC 2, PCI-DSS)
• Provide executive-level risk reporting and advisory to senior management on cyber threats, data protection risks, and control effectiveness
• Oversee data protection and privacy-by-design practices in collaboration with Legal, Compliance, and business stakeholders
• Lead incident preparedness and crisis management, including cyber incidents, data breaches, and regulatory engagement where required
• Direct and mentor Information Security Managers across application security, security operations, GRC, and privacy domains
• Own third-party and supply-chain security risk management, ensuring vendors meet contractual, regulatory, and security requirements
• Partner with Technology, Product, and Engineering leaders to ensure secure architecture, cloud security, and secure development practices are embedded across the organization
• Act as the primary liaison with regulators, auditors, customers, and partners on security and data protection matters
• Build and promote a strong security culture through awareness, training, and executive engagement