Cybersecurity and Technology Risk Manager, Global MNC

We are looking for an experienced Cybersecurity & Technology Risk Manager to lead the organisation's security, technology risk and resilience agenda across enterprise technology, digital platforms and third-party environments.

This is a broad security lead role combining strategy, governance and hands-on oversight. The successful candidate will work closely with Technology and business stakeholders to strengthen cyber resilience, manage technology risks and enable secure digital innovation. This is an individual contributor role.

• Develop and execute the cybersecurity and technology risk strategy, ensuring alignment with business priorities and broader enterprise security standards.
• Establish and enhance security policies, frameworks and controls aligned with NIST, ISO 27001, CIS and other relevant industry standards.
• Oversee security operations across SIEM/SOC, threat detection and response, vulnerability management, endpoint, network and cloud security.
• Manage technology and cyber risk assessments, remediation programmes and control assurance activities.
• Ensure compliance with relevant regulatory and data protection requirements, including PDPA and PCI DSS.
• Lead cyber incident response, crisis management, business continuity and disaster recovery readiness.
• Establish and maintain third-party cybersecurity risk management, including security assessments, due diligence and ongoing monitoring.
• Strengthen security across cloud, SaaS, APIs, mobile applications, digital platforms and end-user environments.
• Drive security-by-design and DevSecOps practices across technology and application initiatives.
• Define security KRIs, KPIs and control metrics, providing clear reporting on cyber risk and security posture to senior management.
• Leverage automation, AI and continuous control monitoring to improve security operations and assurance.
• Partner with regional/global security teams and local stakeholders to ensure enterprise security standards are appropriately implemented.
• Drive security awareness and promote a strong risk and security culture across the organisation.
  
  

• Bachelor's degree in Information Security, Computer Science, Engineering or a related discipline.
• Approximately 6-12 years of experience across cybersecurity, technology risk or information security
• Broad understanding of security operations, cloud security, technology risk, incident response, vulnerability management, data protection and third-party risk.
• Experience managing security within complex, customer-facing or operationally intensive environments.
• Good understanding of PDPA, PCI DSS, NIST, ISO 27001 and CIS Controls.
• Experience supporting digital transformation and applying security-by-design principles to applications and technology platforms.
• Ability to translate technical security risks into clear business impact and practical remediation actions.
• Strong stakeholder management and communication skills, with the ability to influence senior Technology and business leaders.
• Certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 or equivalent would be advantageous.

To apply:

If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060