Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA

About the role

Produce cyber risk reporting for the CISO, executives and the board. Set the rules for which suppliers need deeper review, and follow through on findings. Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal.

What you'll do

• Own the security policy framework, risk register and exception process for the company
• Make sure every exception has an owner, a reason and an end date
• Run vendor risk assessments, from onboarding to ongoing monitoring
• Lead SOX, ISO and customer security audits, working with internal and external auditors
• Prepare EU AI Act compliance and AI governance with the AI Security Lab

What you need

• 12–22 yrs of experience
• Risk management
• ISO 27001
• Compliance
• SOX
• BBA