Senior Manager/VP, Cybersecurity Risk and Governance

We are partnering with an established financial institution to appoint a Senior Manager / VP, Cybersecurity Risk & Governance.

The successful candidate will play a key role in strengthening cybersecurity governance, risk management and control frameworks across regional operations. This position offers the opportunity to work closely with technology, risk and business stakeholders to enhance security standards, regulatory compliance and overall cyber risk management practices.

Key Responsibilities

• Develop and enhance cybersecurity governance frameworks, policies, standards and controls in alignment with regulatory and organisational requirements.
• Provide cybersecurity governance and risk oversight across regional business operations, ensuring consistent application of security standards.
• Assess cybersecurity risks, identify control gaps and drive improvements in security governance and risk management processes.
• Coordinate cybersecurity audits, regulatory reviews and assurance activities, including tracking remediation of identified findings.
• Partner with Technology, Cybersecurity, Risk and Compliance teams to strengthen security controls and governance practices.
• Provide guidance on emerging cybersecurity risks, including third-party security, data protection, cryptographic controls and AI-related risks.
• Promote cybersecurity awareness and facilitate the sharing of security best practices across the organisation.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity or a related discipline.
• 10+ years of experience in cybersecurity governance, technology risk, IT audit or information security
• Strong understanding of cybersecurity governance frameworks, risk management, security controls and regulatory requirements.
• Proven experience in cybersecurity audits, regulatory compliance, control assessments and remediation management.
• Broad knowledge of technology and cybersecurity domains, including third-party risk, data protection, cryptography and emerging technology risks.
• Strong stakeholder management, communication and analytical skills, with the ability to engage regional technology and business teams.
• Professional certifications such as CISSP, CISA, CRISC or CGEIT would be advantageous.

To Apply

Interested candidates are invited to submit their resume to Chen Yi at [Confidential Information], quoting the job title in the subject line. We regret that only shortlisted candidates will be notified.

Registration No: R1876389

Licence No: 16S8060