General Manager, Cybersecurity

Role SummaryWe are seeking an accomplished and strategic technology leader to lead the organization's Information Technology, Cybersecurity, Technology Risk, Governance, and Digital Transformation functions. The role will be responsible for defining and executing enterprise technology strategy, IT operating model, multi-year technology roadmap, and enterprise service management strategy, ensuring cyber resilience, maintaining regulatory compliance, strengthening operational risk management, and enabling secure business growth.The successful candidate will serve as a trusted advisor to executive leadership, regulators, auditors, and business stakeholders while overseeing technology infrastructure, applications, cybersecurity operations, governance frameworks, third-party risk management, data privacy, business continuity, and emerging technology governance including AI.Key ResponsibilitiesCybersecurity LeadershipDefine and execute enterprise cybersecurity strategy and security architecture.Oversee Security Operations Center (SOC), threat monitoring, incident response, vulnerability management, threat intelligence, and security governance activities.Lead implementation and management of:Identity & Access Management (IAM)Privileged Access Management (PAM)Endpoint Detection & Response (EDR)SIEM and Security AnalyticsNetwork Security and Zero Trust ArchitectureData Loss Prevention (DLP)Cloud Security ControlsEstablish cyber resilience capabilities and security awareness programs across the organization.Drive enterprise cybersecurity culture through awareness programmes, phishing simulations and executive reporting.Lead cybersecurity incident response and crisis management during major security events.Technology Risk, Governance & ComplianceEstablish and maintain enterprise IT Governance, Risk and Compliance (GRC) frameworks.Lead Risk and Control Self-Assessment (RCSA) programs, risk register management, control testing, and technology risk reporting. Lead Regulatory Requirement Self-Assessments (RRSA) and technology control attestation programmes.Ensure compliance with regulatory requirements including:MAS Technology Risk Management (TRM)MAS Cyber Hygiene NoticeMAS Outsourcing GuidelinesISO 27001NIST Cybersecurity FrameworkCOBITSOC 2ITILData Protection RegulationsPresent technology and cybersecurity risks to executive management, board committees, and regulators.Develop and monitor Key Risk Indicators (KRIs) and Key Control Indicators (KCIs).Regulatory & Audit ManagementAct as the primary interface for regulators, internal audit, external audit, and risk assurance teams.Lead regulatory inspections, audits, assessments, and remediation programs.Drive timely closure of audit observations, regulatory findings, and risk issues.Conduct gap assessments against new regulations and convert findings into actionable remediation programs.Cloud, Infrastructure & Digital TransformationGovern hybrid and multi-cloud environments including AWS, Azure and Oracle Cloud through architecture governance, landing zone standards, cloud risk assessments and secure control baselines.Establish cloud governance standards, security baselines, architecture principles, and risk management frameworks.Lead modernization of enterprise infrastructure, workplace technologies, and digital banking platforms.Support digital transformation initiatives through secure technology enablement.Third-Party Risk & Vendor ManagementEstablish and oversee Third-Party Risk Management (TPRM) frameworks.Conduct due diligence, risk assessments, contract reviews, and ongoing monitoring of technology vendors.Manage outsourcing governance and compliance requirements.Ensure service levels, operational resilience, and vendor performance objectives are achieved.Data Privacy & Information GovernanceLead enterprise data protection and privacy programs.Ensure compliance with applicable privacy regulations and internal policies.Oversee Data Protection Impact Assessments (DPIAs), data governance, retention, and cross-border data transfer controls.Maintain enterprise Data Protection Management Programme (DPMP).Manage privacy incidents and regulatory reporting obligations.Business Continuity & Operational ResilienceDevelop and maintain Business Continuity Management (BCM) and Disaster Recovery (DR) frameworks.Conduct regular resilience testing, tabletop exercises, and crisis simulations.Ensure Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) meet business requirements.Drive enterprise operational resilience initiatives.AI Governance & Emerging Technology RiskEstablish governance frameworks for Artificial Intelligence, Machine Learning, and Generative AI adoption.Ensure compliance with ISO 42001, NIST AI RMF, MAS FEAT Principles, MAS Veritas Framework, and emerging AI regulations.Conduct AI risk assessments covering explainability, bias, privacy, security, model governance, and human oversight.Support responsible and ethical AI implementation across business functions.Leadership & Stakeholder ManagementLead and mentor cross-functional teams across cybersecurity, infrastructure, risk, governance, and operations.Build high-performing teams through coaching, succession planning, and capability development.Provide strategic technology advisory support to executive leadership and board committees.Translate complex technical and cyber risks into business-impact language for senior stakeholders.Required QualificationsEducationBachelor's Degree in Engineering, Computer Science, Information Technology, or related discipline.MBA or equivalent postgraduate qualification preferred.Professional CertificationsPreferred certifications include:CISM (Certified Information Security Manager)CRISC (Certified in Risk and Information Systems Control)ISO 27001 Lead AuditorISO 42001 Lead AuditorCISSP (Preferred)ISC2 CCCOBITITILCertified Scrum Master (CSM)Experience12+ years of progressive experience in Information Technology, Cybersecurity, Technology Risk, and Governance.5+ years in a senior leadership role such as Head IT, CISO, Head Technology Risk, or Technology Governance Leader.Strong exposure to regulatory engagement, audits, risk committees, and board-level reporting.Proven experience managing large technology and cybersecurity teams.Hands-on knowledge of cloud platforms including AWS, Azure, and Oracle Cloud.Experience leading digital transformation, cybersecurity modernization, and governance initiatives.Work Schedule5.5 daysOn-Site