search Browse Jobs
Director, Cyber Security Governance, Risk and AssuranceSingtel · Singapore, Singapore
Singtel logo

Singtel

company page ↗

Director, Cyber Security Governance, Risk and Assurance

🗓️ Posted 2026-09-07 Singapore, Singapore Full-time Hybrid ICT
💰 Salary Not shared 📊 Market S$15,000–S$25,000/mo

About the Company

An empowering career at Singtel begins with a Hello. Our purpose, to Empower Every Generation, connects people to the possibilities they need to excel. Every "hello" at Singtel opens doors to new initiatives, growth, and BIG possibilities that takes your career to new heights. So, when you say hello to us, you are really empowered to say "Hello BIG Possibilities". Be a Part of Something BIG Reporting to the Group Chief Information Security Officer (GCISO), the Group Cyber Governance, Risk & Assurance Director is a senior Group-level leadership role accountable for setting, maintaining, and enforcing Singtel Group's cyber security policies, standards, and compliance posture. The role owns the Group cyber policy framework, control standards, and assurance mechanisms that ensure cybersecurity risks are consistently identified, assessed, managed, and reported across all Operating Companies and Associates. Working closely with OpCo risk and security leaders, the role defines Group-wide cyber governance requirements, including policies, minimum control standards, and risk acceptance principles. These policy guardrails establish clear expectations for due care, regulatory compliance, and "secure-by-default" outcomes, while allowing measured flexibility for local operating contexts. As a policy authority and trusted governance advisor, the Group GRC Director provides independent oversight and challenge on major initiatives and material risk decisions. The role ensures that cybersecurity risks are formally assessed against Group policies and standards, that policy exceptions are governed through defined approval processes, and that residual risks are transparently escalated and accepted at the appropriate level. This position requires strong risk judgement, regulatory insight, and executive influence, with the ability to translate complex technical and cyber risks into clear policy positions, compliance outcomes, and Board-level risk narratives. The role bridges busine

Requirements

  • ● Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.
  • ● At least 10 years of experience in cybersecurity, technology risk, or GRC roles, with demonstrated experience operating in Group-level, regional, or multi-entity environments, overseeing policy, risk, and compliance across complex organisations.
  • ● Demonstrated experience leading and governing large-scale cybersecurity or technology risk initiatives, including setting Group standards, driving compliance programmes, managing material risk issues, and engaging senior executives and Boards.
  • ● Deep expertise in cybersecurity governance, risk management, and control frameworks, including NIST CSF, ISO/IEC 27001/27002, CIS Controls, and risk-based control models, with the ability to set, interpret, and enforce Group-wide policy and control standards.
  • ● Strong understanding of telco, cloud, and enterprise IT operating environments, including cloud platforms, identity and access management, data protection, and network security, to enable informed risk-based policy decisions and governance oversight of emerging technologies (e.g. AI and quantum).
  • ● Proven ability to translate complex technical and cyber risks into clear governance positions, executive briefings, and Board-level risk narratives that support informed decision-making and risk acceptance.
  • ● Professional certifications preferred: CISSP, CISM, CRISC, CCSP, or equivalent credentials supporting senior leadership in governance, risk, and compliance.
  • ● Demonstrated awareness of emerging cyber threats, regulatory developments, and evolving risk paradigms, with the ability to anticipate impacts to Group policy, controls, and assurance approaches.
  • ● Exceptional leadership, collaboration, and team management skills.
  • ● Ability to work effectively with diverse stakeholders, including subsidiaries in a conglomerate or multi-subsidiary environment.
  • ● Strong analytical, decision-making, and problem-solving skills, especially in dynamic and high-pressure situations.
  • ● Flexible work arrangements
  • ● Full suite of health and wellness benefits
  • ● Ongoing training and development programs
  • ● Internal mobility opportunities