Chief Information Security Officer

We are seeking an accomplished Chief Information Security Officer (CISO) to lead Cybersecurity, Technology Risk, and Cyber Resilience across a rapidly evolving Technology organisation.

This is a highly strategic and technical leadership role suited for an executive who has built their career from a strong engineering foundation and subsequently expanded into technology risk, governance, and executive leadership.

The successful candidate will bring deep expertise in building and scaling security capabilities, embedding security into modern technology environments, and operating as a trusted advisor to executive leadership, regulators, and boards.

Key Responsibilities:

• Lead the development and execution of the organisation's enterprise Cybersecurity, AI Security and AI Risk Management strategy.
• Establish governance frameworks, controls, and oversight mechanisms for the secure adoption of Artificial Intelligence, Generative AI, Large Language Models (LLMs), Agentic AI, and Machine Learning platforms.
• Define enterprise standards and guardrails for AI development, deployment, and usage, ensuring alignment with regulatory expectations and industry best practices.
• Partner with Technology, Data, Product, and Innovation teams to enable responsible AI adoption while managing security, privacy, compliance, and operational risks.
• Establish and continuously enhance security governance, technology risk management, cyber resilience, and control frameworks.
• Develop and maintain risk appetite, Key Risk Indicators (KRIs), and executive reporting for senior management and board committees.
• Act as the primary advisor to executive leadership on cybersecurity, emerging threats, technology risk, and resilience.
• Ensure security is embedded throughout technology delivery lifecycles through secure-by-design and DevSecOps principles.
• Drive modernization of security capabilities through automation, AI-driven security controls, and cloud-native security practices.
• Partner closely with engineering, infrastructure, cloud, and platform teams to strengthen enterprise security posture.
• Embed risk management practices across software engineering, cloud platforms, infrastructure operations, third-party ecosystems, and technology transformation initiatives.
• Ensure effective identification, assessment, monitoring, and remediation of technology and cyber risks.
• Drive security and risk integration across strategic technology programmes, digital transformation initiatives, and M&A activities.
• Maintain effective engagement with regulators, auditors, and external stakeholders.
• Ensure compliance with regulatory expectations and industry frameworks.
• Translate technical risks into business-focused insights and recommendations for executive leadership and boards.
• Build a culture where security and risk management are embedded across the organisation.
• Influence business and technology stakeholders to achieve security and risk objectives while enabling innovation and growth.

Requirements:

• Degree in Computer Science, Engineering, Information Security, or related disciplines.
• 15+ years of experience across Cybersecurity, Technology, Cloud, Infrastructure, and Technology Risk.
• Proven experience leading enterprise-wide cybersecurity and technology risk functions.
• Strong background in Security Engineering, Security Architecture, Cloud Security, Infrastructure Security, or Security Operations.
• Experience establishing or leading AI Security, AI Governance, AI Risk, or Emerging Technology Risk programmes.
• Strong understanding of Generative AI, LLM security, Agentic AI, AI Governance, AI Assurance, and Responsible AI principles.
• Experience implementing security and governance controls for enterprise AI platforms and AI-enabled business solutions.
• Experience operating in highly regulated environments with responsibility for risk management and regulatory engagement.
• CISSP, CISM, CRISC, CCSP, AWS Security Specialty, Azure Security, or equivalent certifications.

We welcome applications from both local and international candidates. The organisation values diversity of thought, experience, and perspectives, and is open to considering exceptional talent from across global markets.

If you are interested in this opportunity, please submit your resume in confidence to Pam Lim at [Confidential Information].

We thank all applicants for their interest; however, only shortlisted candidates with relevant experience will be contacted. All applications will be handled with strict confidentiality.

Pam Lim

Morgan Mckinley Pte Ltd

EA Licence No: 11C5502

EAP Registration No: R1106192