Chief Information Security Officer

The role

The Chief Information Security Officer will establish and lead the information security function in Singapore. This individual contributor role involves building the local security function from the ground up and acting as the primary point of contact with MAS and other Singapore regulators.

What you will do

• Ensure Singapore operations remain compliant with MAS technology risk, data protection and operational resilience requirements
• Lead the implementation of the information security strategy and programme for Singapore based on global standards
• Build the Singapore security function by establishing governance, policies, standards, controls and processes
• Act as the senior point of accountability for information and cyber security in Singapore
• Establish and maintain an effective information security risk management framework
• Work with the Global CSO to implement global security standards while addressing Singapore-specific requirements
• Own the regulatory and legal dimensions of security incident management
• Advise Product and Business teams on Singapore regulatory requirements for new products
• Support regulatory applications, examinations, audits and assessments
• Oversee information security risks associated with third parties and critical technology service providers

Required qualifications

• Strong knowledge of the Singapore financial services regulatory environment
• Experience working with MAS technology risk, cyber security and operational resilience expectations
• Significant experience in senior information security, cyber security or technology risk leadership roles within regulated financial services, payments, banking or fintech
• Bachelor or equivalent degree in information security, technology, audit or similar discipline
• Understanding of the Singapore privacy regulations and their application in financial and fintech services
• Strong knowledge across security governance, technology risk, regulatory compliance, audit facilitation and incident management
• Experience engaging with regulators and supporting regulatory applications, examinations, audits and security assessments
• Ability to translate complex technical and regulatory requirements into pragmatic controls and clear business decisions
• Strong executive-level stakeholder management skills
• Experience working within an international organisation and collaborating with global security and technology teams
• Excellent written and verbal communication skills

Nice to have

• Security certifications like CISSP, CISM, CISA
• Experience in a company operating on a global scale
• Experience with GRC platforms like Vanta, Drata or similar tools

Benefits

• Fair and competitive salary
• Flexible working hours
• Hybrid working
• A MacBook and the accessories you need
• A culture built on passionate growth minded people
• A flexible approach to holiday
• Opportunities to travel to offices in locations such as London and Cape Town

About the company

BVNK is the stablecoin-powered financial stack for enterprises and is now part of Mastercard. They enable businesses to move money in seconds across 130+ countries using stablecoins and fiat.