Group Head of Cybersecurity (MNC / East) [EL]

Responsibilities

• Define and implement the Group’s global cybersecurity operating model, including governance, decision rights, responsibilities, escalation protocols and regional coordination.
• Develop the Group cybersecurity architecture and strategic roadmap covering network security, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management.
• Establish consistent cybersecurity control baselines across critical systems, operating entities and privileged-access environments, supported by formal exception and risk-acceptance processes.
• Provide security leadership for new technology platforms, system integrations, cloud migrations and digital transformation initiatives.
• Lead vulnerability and exposure management, including asset discovery, vulnerability assessment, risk-based prioritisation, remediation standards and external attack-surface management.
• Oversee security operations covering SIEM, EDR, detection engineering, threat hunting, threat intelligence and managed SOC performance.
• Establish and lead a Group-wide Cybersecurity Incident Response capability, including common playbooks, severity classifications, escalation procedures and coordinated response across regions.
• Act as Incident Commander for significant cybersecurity incidents, coordinating containment, recovery, investigation, executive communication and relevant regulatory or stakeholder notifications.
• Strengthen cyber resilience through secure backup standards, recovery testing and business-continuity measures for critical systems.
• Develop cybersecurity controls for operational technology and logistics environments, including warehouse systems, automation, robotics, transport platforms, fleet devices and EDI/API integrations.
• Lead identity, cloud and data-security initiatives, including MFA, privileged-access management, encryption, key management, data-loss prevention and secure AI adoption.
• Maintain Group cybersecurity policies and standards aligned with recognised frameworks such as ISO 27001 and NIST.
• Translate applicable cybersecurity, privacy and cross-border data requirements into practical technical and operational controls.
• Lead third-party cybersecurity risk management, customer security assessments, cyber-insurance reviews and security due diligence for acquisitions.
• Build and develop the Group cybersecurity function, coordinate regional security resources through a matrix structure, manage the cybersecurity budget and provide risk reporting to senior management and relevant governance committees.

Requirements

• At least 12 years of experience in cybersecurity, including significant experience leading technical security teams across multiple markets or regions.
• Strong technical knowledge across cybersecurity architecture, network security, cloud security, identity and access management, endpoint security, vulnerability management, SIEM, EDR and security engineering.
• Proven experience developing or transforming cybersecurity capabilities within a geographically distributed organisation.
• Demonstrated experience managing major cybersecurity incidents from detection and containment through recovery and remediation.
• Experience coordinating internal security teams, external forensic specialists, legal advisers and managed-security providers.
• Strong stakeholder-management skills with the ability to influence regional and country teams within a matrix environment.
• Working knowledge of major cybersecurity and data-protection frameworks and regulations.
• Experience in operational technology, industrial systems or environments where system availability is critical will be advantageous.
• Strong communication and executive stakeholder-management skills.
• Experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing would be advantageous.
• Relevant certifications such as CISSP, CISM, CCISO, GIAC, OSCP or cloud-security certifications would be advantageous.

We regret only shortlisted candidates will be contacted. All applications will be handled confidentially. By submitting your application, you agree to the collection, use, retention, and disclosure of your personal information to prospective employers.

Wecruit Pte Ltd

EA License No: 20C0270