Head of Cyber Security and IT

About the role

This senior leadership position holds enterprise‑wide accountability for the security, resilience and governance of the organisation’s technology environment. Reporting to the CTO and working closely with the Chief Security Officer and Risk & Compliance team, you will define and lead the IT roadmap and cybersecurity function, ensuring infrastructure, applications and identity systems are secure, compliant and ready for global hyperscale cloud growth, initially focused on APAC.

Key responsibilities

• Act as the strategic authority on emerging cyber risks, especially AI‑driven threats, and conduct red‑team and simulation exercises.
• Lead end‑to‑end delivery of corporate IT infrastructure, including networks, compute, storage and cloud platforms (Azure and AWS), and oversee the IT service desk and ITIL‑aligned service management.
• Own the corporate applications landscape, governing the SaaS ecosystem (M365, Atlassian, Slack, HRIS, CRM, finance platforms) with responsibility for licensing, data classification and DLP controls.
• Execute the organisation‑wide cybersecurity strategy covering endpoint protection, identity and access management, threat detection, incident response and vulnerability management.
• Partner with Risk & Compliance to achieve and maintain certifications such as ISO 27001, SOC 2, IRAP, DISP and MAS TRM.
• Shape IT strategy, annual planning and budgeting while building and leading a high‑performing multidisciplinary team and managing strategic vendor relationships.

Required profile

• Proven senior leadership experience in enterprise IT and cyber security.
• Track record of delivering secure, compliant cloud and on‑premise infrastructure at scale.
• Experience managing large, multidisciplinary teams and driving cross‑functional collaboration.
• Demonstrated ability to obtain and maintain industry‑recognised security certifications.

Required skills

• Microsoft Azure
• Amazon Web Services (AWS)
• Microsoft 365 (M365)
• Atlassian suite
• Slack
• Identity and Access Management (IAM), MFA, SSO, RBAC, ABAC
• Endpoint protection
• Threat detection and incident response
• Vulnerability management
• Security Operations Center (SOC) / Managed Detection and Response (MDR)
• ITIL service management
• ISO 27001, SOC 2, IRAP, DISP, MAS TRM certifications