Security Engineer (DevSecOps, Detection & GRC)

Contract Type:

Permanent

Location:

Singapore, Singapore

Date Published:

14-Apr-2026

Salary:

We are currently partnering with a Singapore-based regulated financial technology organisation in the digital payments and digital asset infrastructure space to identify a senior Cybersecurity leader.

This is a key leadership appointment covering enterprise security, technology risk, and security operations across a fast-scaling, highly regulated environment. The organisation is licensed by the Monetary Authority of Singapore and operates within the digital asset and cross-border payments ecosystem, offering services spanning custody, OTC trading, fiat rails, and brokerage infrastructure.

The Opportunity
You will take ownership of the end-to-end cybersecurity and technology risk agenda, shaping both strategy and execution across engineering, operations, and governance domains.

What You'll Be Responsible For

• Building and evolving enterprise-wide security architecture, including identity and access management, application/data protection, and cloud security design principles
• Leading SOC and security operations capabilities, including managed detection and response, threat intelligence, vulnerability management, and advanced threat simulation activities
• Owning regulatory and audit readiness across multiple frameworks such as MAS TRM, HKMA guidelines, PDPA, GDPR, ISO standards, SOC 2, and PCI DSS
• Driving incident readiness and response at a senior level, including coordination of critical events and executive communication during security incidents
• Setting long-term cybersecurity direction, including roadmap planning, tooling strategy, and reporting risk posture to senior stakeholders

What We're Looking For

• Extensive experience (12+ years) in information security, with a strong track record leading multi-domain teams (engineering, operations, risk/compliance)
• Prior exposure to highly regulated industries such as financial services, payments, or fintech environments
• Hands-on experience implementing modern security practices such as Zero Trust, DevSecOps, cloud-native security (AWS or OCI), IAM/PAM, SIEM/SOAR, and enterprise data protection
• Demonstrated capability in managing high-severity incidents and communicating effectively with executive and regulatory stakeholders
• Strong ability to connect technical security issues with business and risk impact

Bonus Experience

• Industry certifications such as CISSP, CISM, CCSP or CCISO
• Experience leading ISO 27001, SOC 2 or PCI DSS programs end-to-end
• Familiarity with privacy frameworks and certifications (e.g. CIPP/E, CIPM)

We are looking for someone who thrives in a high-accountability environment where security, compliance, and innovation intersect in the digital assets space.
If this sounds aligned with your next move, we're happy to connect for a confidential conversation.

Reg No. R1768414
BeathChapman Pte Ltd
Licence no. 16S8112