VP/Director, Information Security Risk Manager

Cyber Security Roles in Singapore
Job Posting by Belle Lim, Business Manager at Hays Singapore
[email protected]

Role Overview
An established financial institution is seeking a senior Information Security Risk professional to support and oversee information security risk management for large-scale, multi-year core banking and technology transformation initiatives across the region.
The role sits at the intersection of business, technology, and security, partnering closely with senior stakeholders across IT, risk, compliance, and business units to ensure effective identification, assessment, mitigation, and reporting of information security risks within complex banking environments.
This position is critical to ensuring secure delivery of core banking capabilities supporting corporate and institutional banking businesses, including payments, lending, trade finance, and cash management.

Key Responsibilities

• Act as a senior security risk advisor and primary liaison between business stakeholders, technology teams, and information security functions
• Lead information security risk assessments for core banking programs, covering system integration, data migration, application security, and third-party/vendor risks
• Identify, assess, and clearly articulate security risks in business terms, recommending practical and commercially viable mitigation strategies
• Maintain and govern security risk registers, ensuring accurate reporting to senior management and relevant risk committees
• Support regional risk governance and ensure alignment with internal risk frameworks and regulatory expectations
• Provide advisory support on secure system design, SDLC controls, vulnerability management, and operational security practices
• Collaborate with legal, audit, and compliance teams to ensure regulatory readiness across APAC jurisdictions
• Track emerging cyber threats, regulatory developments, and industry best practices to continuously uplift risk posture

Key Requirements

• Strong experience within corporate and institutional banking environments
• Hands-on exposure to core banking platforms and financial market infrastructure, including T24 and SWIFT
• 10+ years of experience in information security, technology risk, or cyber risk management within banking or financial services
• Deep understanding of information security risk management frameworks (e.g. ISO 27001, NIST, COBIT, OWASP)
• Proven ability to perform application and infrastructure risk assessments in complex, large-scale banking environments
• Strong stakeholder management skills, with the ability to influence senior business and technology leaders
• Familiarity with APAC banking regulations and supervisory expectations is preferred
• Professional certifications such as CISSP, CISM, or CRISC are advantageous

What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV to [email protected]. If this job isn't quite right for you but you are looking for a new position, please contact me for a confidential discussion on your career.

Apply now or refer a friend (Get rewarded with $200 CapitaStar Gift voucher upon a successful friend referral!)

At Hays, we value diversity and are passionate about placing people in a role where they can flourish and succeed. We actively encourage people from diverse backgrounds to apply. EA License Number: 07C3924 l Registration Number: R21100438 l Company Registration ID No.: 200609504D