Head of Cyber Governance and Risk

About the role

We are looking for an experienced cybersecurity leader to shape and oversee enterprise security governance, technology risk and data protection across the organisation. Reporting to the CTO, you will provide independent oversight of strategy, compliance and security architecture while partnering with technology and business leaders.

Key responsibilities

• Develop and enhance enterprise cybersecurity governance, policies and security standards.
• Lead technology risk assessments, security architecture reviews and risk acceptance processes.
• Drive data protection and privacy governance, including data classification and regulatory compliance.
• Oversee cybersecurity audits, regulatory engagements, certification programmes and remediation activities.
• Provide governance over third‑party security risk, business continuity and incident management.
• Develop executive dashboards and report cyber risk posture to senior management.
• Build and lead a high‑performing security governance team and foster strong stakeholder relationships.

Required profile

• Degree in Computer Science, Information Security or a related discipline.
• 12+ years of experience in cybersecurity, technology risk or information security governance.
• Strong knowledge of ISO 27001, NIST, PCI DSS, PDPA/GDPR and enterprise security governance.
• Experience leading security audits, regulatory compliance and technology risk programmes.
• Excellent communication and stakeholder management skills with the ability to influence senior leadership.
• Preferred: current or former CISO, Deputy CISO, Head of Information Security, or ready to step into a CISO role.

Required skills

• ISO 27001
• NIST
• PCI DSS
• PDPA
• GDPR