VP, Security Governance Lead
We are seeking an experienced cybersecurity leader to oversee the organisation’s governance, risk, and assurance capabilities. This role is responsible for establishing and maintaining an effective cyber governance framework, ensuring security risks are appropriately managed, and driving continuous improvements across the enterprise security programme.
Reporting to the Chief Information Security Officer (CISO), you will lead the Governance, Risk & Compliance (GRC) function while partnering closely with technology, risk, audit, and business leaders to strengthen the organisation’s overall cyber resilience.
This position combines strategic leadership with operational oversight and is well suited for someone who enjoys influencing enterprise-wide security initiatives in a highly regulated environment.
Key Responsibilities:
Governance & Security Frameworks
- Develop and maintain enterprise cybersecurity governance, policies, standards, and control frameworks.
- Ensure governance processes remain aligned with evolving regulatory obligations, business priorities, and industry best practices.
- Review security policy exceptions and risk acceptance requests, providing appropriate recommendations and oversight.
- Champion continuous improvement initiatives to enhance governance maturity across the organisation.
Cyber Risk & Assurance
- Lead enterprise cybersecurity risk assessments to identify and evaluate technology and cyber risks.
- Oversee security assurance activities, including vulnerability assessments, penetration testing, control reviews, and cyber resilience exercises.
- Track remediation activities to ensure identified risks and control gaps are addressed in a timely manner.
- Evaluate emerging cyber threats and technologies, recommending appropriate safeguards where necessary.
Audit & Regulatory Engagement
- Act as the primary cybersecurity representative for internal and external audit engagements.
- Coordinate responses to audit requests and oversee remediation programmes arising from audit findings.
- Ensure appropriate governance processes exist to demonstrate compliance with applicable security and regulatory requirements.
- Partner with internal stakeholders to improve the effectiveness of security controls and governance practices.
Leadership & Stakeholder Management
- Lead and develop a high-performing Governance, Risk & Compliance team.
- Foster a collaborative culture focused on accountability, continuous learning, and operational excellence.
- Provide strategic guidance to technology and business stakeholders on cyber risk and governance matters.
- Support executive leadership through regular reporting on cyber risks, control effectiveness, and programme maturity.
Performance & Reporting
- Develop meaningful security metrics and key risk indicators to measure programme effectiveness.
- Prepare reports and presentations for executive management, governance committees, and senior stakeholders.
- Drive data-driven decision making through insightful analysis of cyber risks and control performance.
Requirements:
- Degree in Information Security, Computer Science, Computer Engineering, or a related discipline.
- At least 10 years of experience within cybersecurity governance, enterprise risk management, information security, or IT assurance.
- Previous experience leading Governance, Risk & Compliance (GRC) functions or enterprise security governance teams.
- Experience working within regulated industries or large, complex organisations is highly desirable.
- Recent years of experience in leading a team.
Technical Expertise
- Strong understanding of cybersecurity governance, enterprise risk management, and control frameworks.
- Experience implementing or managing recognised standards such as ISO 27001, NIST CSF, COBIT, CIS Controls, or similar frameworks.
- Good appreciation of cloud security, infrastructure security, secure software delivery practices, and modern enterprise technology environments.
- Familiarity with audit methodologies, control assessments, and regulatory compliance programmes.
To apply:
If you’re interested to apply or find out more, please share across your CV or reach out to Chen Yi at cy@kerryconsulting.com for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.
Reg: R1876389
Lic: 16S8060
A large, highly regulated organisation is looking for an experienced cybersecurity leader to oversee its security operations and strengthen its defensive capabilities.
The role combines technical...
Our client is a leading global financial institution seeking an experienced IAM professional to lead and enhance its enterprise Identity Governance & Administration (IGA)...
A leading global financial services organisation is looking for an experienced AI Security & Technology Risk professional to join its technology risk function.
With Artificial Intelligence...
A large, highly regulated organisation is looking for an experienced cybersecurity leader to oversee its security operations and strengthen its defensive capabilities.
The role combines technical...
A global organisation is looking for an experienced IAM Solution Architect to drive the architecture and design of enterprise identity and access management solutions.
You will help shape the...
This is a senior leadership appointment with broad regional/global exposure, responsible for strengthening the organisation’s risk management capabilities across an increasingly complex technology...
An established organisation with complex technology and operational environments is seeking an experienced Chief Information Security Officer (CISO) to lead its enterprise...
Our client is a leading multinational organisation with an established presence globally. As part of its continued investment in cybersecurity, the organisation is looking for an experienced security...
Our client is a leading multinational organisation with an established presence globally. As part of its continued investment in cybersecurity, the organisation is looking for an experienced...
We are seeking an experienced cybersecurity leader to oversee the organisation’s governance, risk, and assurance capabilities. This role is responsible for establishing and maintaining an effective...
We are currently supporting a global client in seeking a senior cybersecurity leader to drive its enterprise Vulnerability Management capability.
The role will evolve traditional vulnerability...
We are looking for an experienced Cybersecurity & Technology Risk Manager to lead the organisation’s security, technology risk and resilience agenda across enterprise technology, digital platforms...
A global organisation is looking for an experienced IAM Solution Architect to drive the architecture and design of enterprise identity and access management...
This is a senior leadership appointment with broad regional/global exposure, responsible for strengthening the organisation’s...
We are looking for a technically strong cybersecurity professional to join an established security team and help strengthen how security controls are assessed across a complex enterprise environment.
Unlike...
A large, highly regulated organisation is looking for an experienced cybersecurity leader to oversee its security operations and strengthen its defensive capabilities.
The role combines technical...
Our client is an established enterprise operating complex, always-on technology platforms. It is seeking a senior engineering leader to shape and scale secure software delivery, platform engineering...
We are partnering with a leading Singapore-based organization seeking a senior Application Security Architecture leader to drive secure-by-design practices, enterprise security architecture and AI security...
We are looking for an AI Security Specialist to strengthen the organisation’s approach to securing AI adoption and leveraging...
Our client is an established international technology organisation providing enterprise software solutions to customers globally. The business works with large organisations across a range of industries,...
A leading international financial institution is seeking an...
We are currently supporting a global client in seeking a senior cybersecurity leader to drive its enterprise Vulnerability Management...
We are looking for an experienced Cybersecurity & Technology Risk Manager to lead the organisation’s security, technology risk and resilience agenda across enterprise technology, digital platforms...
We are looking for an experienced Cybersecurity & Technology Risk Manager to lead the organisation’s security, technology risk and resilience agenda across enterprise...
We are seeking an experienced Head of IT & Cybersecurity to lead the strategy, operations, and continuous improvement of the organisation’s IT infrastructure and cybersecurity posture. This...
An international financial institution is seeking an experienced leader to head its local Information Security Coordination and Business Continuity function. This role combines team leadership, information...
The Head of Cyber Operations will lead the organisation’s cyber defence capability, overseeing 24×7 Security Operations, Threat Intelligence, Threat Hunting, Detection Engineering and Incident...
An organisation operating within a large, complex and mission-critical environment is seeking an experienced leader to head its Incident Management & Reporting function.
This role is responsible...
We are seeking an experienced Application Security Risk Manager to provide risk oversight and challenge across application security and technology controls.
The...