Head of Cyber Governance and Risk

About the role

The organisation is looking for a senior cybersecurity leader to own enterprise security governance, technology risk and data protection. Reporting to the CTO, the role provides independent oversight of strategy, compliance and security architecture while partnering with technology and business leaders.

Key responsibilities

• Develop and continuously improve cybersecurity governance, policies and security standards across the enterprise.
• Lead technology risk assessments, security architecture reviews and risk‑acceptance processes.
• Drive data‑protection and privacy governance, including data classification and regulatory compliance.
• Oversee cybersecurity audits, regulatory engagements, certification programmes and remediation activities.
• Provide governance for third‑party security risk, business continuity and incident management.
• Create executive dashboards and report cyber‑risk posture to senior management.
• Build and lead a high‑performing security governance team and foster strong stakeholder relationships.

Required profile

• Degree in Computer Science, Information Security or a related discipline.
• 12+ years of experience in cybersecurity, technology risk or information security governance.
• Strong knowledge of ISO 27001, NIST, PCI DSS, PDPA/GDPR and enterprise security governance.
• Proven experience leading security audits, regulatory compliance and technology‑risk programmes.
• Excellent communication and stakeholder‑management skills with the ability to influence senior leadership.

Required skills

• ISO 27001
• NIST framework
• PCI DSS
• PDPA
• GDPR