VP, Cyber Security Risk Management

A second line risk function within a well-established financial services organisation in Singapore is looking for a VP to join its technology and cyber security risk oversight team. This is an independent assurance role: you will review, challenge and report on the cyber security and data risk practices owned by the first line, rather than operating those controls yourself.

What you'll do

• Provide independent review and challenge of cyber security risk assessments and control testing carried out by first line teams
• Assess the effectiveness of data security controls, including encryption, access management, data loss prevention and data classification
• Evaluate control design and effectiveness across the technology estate, covering cloud, infrastructure and application security
• Partner with technology and security teams to strengthen data protection standards and control frameworks
• Escalate key risk exposures, control weaknesses and emerging issues to senior management and risk governance committees
• Support oversight of cyber security incidents, including root cause review and tracking of remediation
• Contribute to the ongoing development of risk frameworks, policies and standards

What you'll bring

• Eight to twelve years in technology or cyber security risk management, assurance or audit, ideally within a regulated financial services environment
• A strong background in data security is essential. Candidates currently working in a first line (practitioner) cyber or data security role, with a genuine interest in moving into second line risk oversight, are encouraged to apply
• Working knowledge of a recognised control framework such as ISO 27001 or NIST
• Strong stakeholder management and communication skills, with the ability to engage senior and technical audiences with equal credibility