Information Security, Governance & Risk Lead

at  Sloane Shorey Consulting

Responsibilities:
Policies: Establish enterprise-wide cyber security policy framework aligned with business objectives, laws, and regulations. Develop minimum standards and collaborate with Controls teams to manage security exceptions.
Risk Assurance: Conduct security risk assurance activities for projects. Manage Information Security team’s engagement with audits and investigations. Provide security advisory for projects and assist in security risk and capability evaluations.
Security Stakeholder Management and Reporting: Define KPIs for measuring security effectiveness. Develop security dashboards and manage enterprise-wide security awareness training program. Measure effectiveness of training and provide regular management and stakeholder reporting.

Profile:

• Bachelor’s degree in Information Technology or equivalent.
• Minimum 10 years of experience in cybersecurity focusing on governance, risk management, and compliance.
• Professional qualification in information security management (e.g., CISSP, CISM, CISA) preferred.
• Familiarity with security policy, standards, and controls definition.
• Strong knowledge of current and emerging cyber security risks and innovative risk management methods.

Sloane | Shorey
Sloane Shorey Consulting is a Singapore-based executive search firm founded in 2016. We specialize in risk management recruitment across Asia. Our coverage includes financial risk management, operational and enterprise risk, and regulatory risk and compliance.
Sloane Shorey is a Ministry of Manpower Licensed Employment Agency: EA License 20S030

Please refer the Job description for details