General Manager, Cybersecurity

GeneralManager, Cybersecurity Location: Singapore ReportsTo: CTO RoleSummary Weare seeking an accomplished and strategic technology leader to lead theorganization's Information Technology, Cybersecurity, Technology Risk,Governance, and Digital Transformation functions. The role will be responsiblefor defining and executing enterprise technology strategy, IT operating model,multi-year technology roadmap, and enterprise service management strategy,ensuring cyber resilience, maintaining regulatory compliance, strengtheningoperational risk management, and enabling secure business growth. Thesuccessful candidate will serve as a trusted advisor to executive leadership,regulators, auditors, and business stakeholders while overseeing technologyinfrastructure, applications, cybersecurity operations, governance frameworks,third-party risk management, data privacy, business continuity, and emergingtechnology governance including AI. KeyResponsibilities CybersecurityLeadership Define and execute enterprise cybersecurity strategy and security architecture. Oversee Security Operations Center (SOC), threat monitoring, incident response, vulnerability management, threat intelligence, and security governance activities. Lead implementation and management of: Identity & Access Management (IAM) Privileged Access Management (PAM) Endpoint Detection & Response (EDR) SIEM and Security Analytics Network Security and Zero Trust Architecture Data Loss Prevention (DLP) Cloud Security Controls Establish cyber resilience capabilities and security awareness programs across the organization. Drive enterprise cybersecurity culture through awareness programmes, phishing simulations and executive reporting. Lead cybersecurity incident response and crisis management during major security events. TechnologyRisk, Governance & Compliance Establish and maintain enterprise IT Governance, Risk and Compliance (GRC) frameworks. Lead Risk and Control Self-Assessment (RCSA) programs, risk register management, control testing, and technology risk reporting. Lead Regulatory Requirement Self-Assessments (RRSA) and technology control attestation programmes. Ensure compliance with regulatory requirements including: MAS Technology Risk Management (TRM) MAS Cyber Hygiene Notice MAS Outsourcing Guidelines ISO 27001 NIST Cybersecurity Framework COBIT SOC 2 ITIL Data Protection Regulations Present technology and cybersecurity risks to executive management, board committees, and regulators. Develop and monitor Key Risk Indicators (KRIs) and Key Control Indicators (KCIs). Regulatory& Audit Management Act as the primary interface for regulators, internal audit, external audit, and risk assurance teams. Lead regulatory inspections, audits, assessments, and remediation programs. Drive timely closure of audit observations, regulatory findings, and risk issues. Conduct gap assessments against new regulations and convert findings into actionable remediation programs. Cloud,Infrastructure & Digital Transformation Govern hybrid and multi-cloud environments including AWS, Azure and Oracle Cloud through architecture governance, landing zone standards, cloud risk assessments and secure control baselines. Establish cloud governance standards, security baselines, architecture principles, and risk management frameworks. Lead modernization of enterprise infrastructure, workplace technologies, and digital banking platforms. Support digital transformation initiatives through secure technology enablement. Third-PartyRisk & Vendor Management Establish and oversee Third-Party Risk Management (TPRM) frameworks. Conduct due diligence, risk assessments, contract reviews, and ongoing monitoring of technology vendors. Manage outsourcing governance and compliance requirements. Ensure service levels, operational resilience, and vendor performance objectives are achieved. DataPrivacy & Information Governance Lead enterprise data protection and privacy programs. Ensure compliance with applicable privacy regulations and internal policies. Oversee Data Protection Impact Assessments (DPIAs), data governance, retention, and cross-border data transfer controls. Maintain enterprise Data Protection Management Programme (DPMP). Manage privacy incidents and regulatory reporting obligations. BusinessContinuity & Operational Resilience Develop and maintain Business Continuity Management (BCM) and Disaster Recovery (DR) frameworks. Conduct regular resilience testing, tabletop exercises, and crisis simulations…