Director, Information & Cyber Security role with a global industrial conglomerate (based in the western part of Singapore)

• At least 15+ years of progressive experience in cybersecurity and/or information technology, including leadership experience within large or critical infrastructure organisations.
• Demonstrated success in leading enterprise-wide cybersecurity programmes, with experience covering cybersecurity strategy, governance, risk management, security operations, and cyber resilience.
• Proven experience in leading cybersecurity incident response, crisis management, and enterprise cyber risk management initiatives.

Our client is a global and listed industrial company with an international presence and a key market leader in its field. For this role, you are based in the office in the West (Note: the co provides island-wide transport services to the office. The co also allows a hybrid work arrangement of 1 day WFH per week).

For this role, you lead the development and execution of the firm’s enterprise-wide information and cybersecurity strategy, ensuring the protection of the Group's digital assets, operational technology (OT) environments, critical infrastructure, and business operations against evolving cyber threats. This role is responsible for fostering a strong cybersecurity culture, ensuring regulatory compliance, and strengthening the organization's overall cyber resilience.

Job Description

• Develop/implement/enhance the firm’s enterprise-wide information and cybersecurity strategy, policies, standards, and governance framework.

• Lead the Group's cybersecurity programme to safeguard IT systems, OT environments, digital assets, and critical infrastructure.

• Establish/maintain effective cybersecurity governance, risk management, and compliance frameworks in line with industry standards and regulatory requirements.

• Oversee security operations, including threat monitoring, vulnerability management, incident detection, response, and recovery.

• Drive cyber resilience initiatives, including business continuity, disaster recovery, and crisis management planning for cyber incidents.

• Partner with business leaders and technology teams to embed security-by-design principles into digital transformation and technology initiatives.

• Manage cybersecurity risk assessments, third-party security reviews, and vendor risk management programmes.

• Ensure compliance with relevant cybersecurity regulations, standards, and best practices (e.g. ISO 27001, NIST, IEC 62443, PDPA where applicable).

• Provide strategic leadership to the cybersecurity function, including team development, capability building, budgeting, and resource planning.

• Build strong relationships with regulators, industry partners, and external stakeholders to stay ahead of emerging cyber threats and evolving regulatory developments.

• Promote a culture of cybersecurity awareness across the organisation through training, education, and stakeholder engagement.

• Regularly report cybersecurity posture, key risks, and strategic initiatives to senior management and the Board.

Requirements:

• A Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• Possess a proven track record of developing and leading enterprise-wide cybersecurity strategies with large, complex organisations.
• At least 15+ years of progressive experience in cybersecurity and/or information technology, including leadership experience within large-scale, complex, or critical infrastructure organisations.
• The following professional certifications are highly desirable (though not a must):

-CISSP (Certified Information Systems Security Professional)

-CISM (Certified Information Security Manager)

• Additional certifications such as CRISC, CISA, ISO 27001 Lead Implementer/Auditor, GIAC, or equivalent credentials would be an advantage
• Demonstrated success in leading enterprise-wide cybersecurity programmes, with responsibility for cybersecurity strategy, governance, risk management, security operations, and cyber resilience.
• Strong experience across both Information Technology (IT) and Operational Technology (OT) environments. Experience within the industrial/engineering/energy/ maritime/manufacturing sectors will be highly advantageous (but not a must)
• Proven experience in leading cybersecurity incident response, crisis management, and enterprise cyber risk management initiatives.
• Additional qualifications in Business Administration, Management, or a related discipline is beneficial.
• Open to being based in the western part of Singapore (though the co allows for 1-day WFH/ week. The co also provides bus transport pick-ups from various locations across Singapore)

Key Competencies

• Stakeholder Management skills – Strong communication and presentation skills, with the ability to articulate complex cybersecurity issues and risks to senior management, executive leadership, and Board members in a clear and commercially meaningful manner.

• Technical Expertise – Deep understanding of cybersecurity frameworks, evolving threat landscapes, cloud technologies, identity and access management, data governance, AI security, and both IT and OT security architectures.

• Risk Management & Analytical Skills – Strong ability to identify, assess, and mitigate cybersecurity risks while developing practical and effective security strategies.

• Incident & Crisis Leadership – Demonstrated capability in leading organisations through cybersecurity incidents with sound judgement, decisive decision-making, and effective stakeholder management.

• Regulatory & Governance Knowledge – Strong knowledge of global cybersecurity regulations, governance frameworks, and industry best practices, including standards such as ISO 27001, NIST Cybersecurity Framework, IEC 62443, and other relevant regulatory requirements

• Strategic Business/Commercial Acumen

• Executive Coaching/Leadership skills

To apply, pl send your cv in word doc. Pl also include details on your current salary, expected salary and notice period in your cv.

We regret to inform you that only shortlisted candidates will be notified.

Posted by:

CAP Consulting (EA license: 14C7175)

Caroline Poh (EA Registration: R1105649)

Date ad is posted - 3 July 2026