Chief Information Security Officer (CISO)

This is a unique opportunity to take end-to-end ownership of cybersecurity within a lean, fast-moving technology organisation operating at global scale.

We are looking for a technically accomplished cybersecurity leader with a proven Build, Run & Transform track record - someone who has established security capabilities from the ground up, managed operational security and successfully modernised security architecture and engineering practices.

The successful candidate will combine CISO-level strategic leadership and stakeholder management with deep hands-on security engineering and architecture expertise.

Working closely with senior leadership, software engineering, infrastructure and business teams, you will shape the organisation's security direction while remaining actively involved in critical technical decisions and implementation.

Key Responsibilities:

• Define and execute the enterprise cybersecurity strategy, target security architecture, operating model and transformation roadmap.
• Design and establish scalable security capabilities across cloud infrastructure, applications, APIs, corporate IT and data platforms.
• Lead security architecture and engineering initiatives, embedding secure-by-design principles into technology platforms and software development.
• Drive cloud security architecture across AWS environments, including identity, network security, workload protection, encryption and infrastructure-as-code.
• Establish DevSecOps capabilities, integrating automated security testing, threat modelling and vulnerability management into CI/CD pipelines.
• Develop security frameworks and technical guardrails for emerging technologies, including AI models, agents and automation.

• Own the organisation's end-to-end cybersecurity posture, including security operations, incident response, vulnerability management and operational resilience.
• Oversee security across customer-facing e-commerce platforms, applications, APIs, payment processes and enterprise infrastructure.
• Lead critical security investigations, incident response, containment and recovery.
• Establish effective security monitoring, detection capabilities, incident playbooks and operational controls.
• Manage technology security risks, third-party security exposure and data protection requirements.
• Ensure alignment with relevant regulatory and industry standards, including GDPR and PCI DSS.

• Lead the transformation of security capabilities into a scalable, engineering-led operating model.
• Modernise security architecture, cloud controls, application security and detection capabilities.
• Drive automation and DevSecOps adoption to improve security effectiveness without compromising engineering agility.
• Leverage modern security tooling, AI and agentic automation to enhance detection, investigation and remediation.
• Partner with technology teams to strengthen security across digital platforms, cloud environments and software delivery processes.
• Establish measurable security outcomes and continuously improve cybersecurity maturity and resilience.

• Act as the organisation's senior cybersecurity authority, providing strategic and technical leadership.
• Advise executive leadership on cybersecurity risks, security investments, architecture decisions and business impact.
• Translate complex technical security challenges into clear, commercially relevant recommendations.
• Influence engineering and business stakeholders to embed security into technology strategy and operational decisions.
• Lead cross-functional security initiatives and manage external security partners and technology vendors.
• Balance long-term security strategy with hands-on technical execution in a lean, agile environment.

• Proven experience in a senior cybersecurity leadership role, such as CISO, Head of Security, Head of Security Engineering, Security Architecture Director or equivalent.
• Demonstrated Build, Run & Transform experience, with a track record of establishing, operating and modernising security capabilities.
• Strong technical foundation in security engineering and architecture, ideally developed through hands-on engineering or architecture roles.
• Deep expertise in cloud security, particularly AWS, alongside application security, infrastructure security and DevSecOps.
• Strong understanding of modern software engineering environments, APIs, CI/CD pipelines, distributed systems and security automation.
• Proven ability to design security solutions, challenge technical architecture and guide engineering teams through implementation.
• Experience owning cybersecurity strategy, operational risk, incident response and security improvement programmes.
• Strong executive stakeholder management, with the ability to influence senior leadership and communicate security risks in business terms.
• Comfortable operating in a lean, fast-paced technology environment, combining strategic ownership with technical involvement.

Highly Desirable

• Experience in e-commerce, digital platforms, SaaS, fintech or high-growth technology businesses.
• Exposure to securing high-volume customer-facing platforms, payment systems and cloud-native applications.
• Experience establishing or transforming a security function.
• Knowledge of AI security, cloud automation and modern security engineering tooling.
• Relevant certifications such as CISSP, CCSP, AWS Security Specialty or OSCP.

If you are a hands-on cybersecurity leader who thrives on building, running and transforming security capabilities, and can combine deep technical expertise with strategic business leadership, we would welcome a confidential discussion.

Apply now or get in touch to explore this opportunity confidentially.

Pam Lim

Morgan Mckinley Pte Ltd

EA Licence No: 11C5502 | EAP Registration No: R1106192