Head of Information Security - Singapore

Owns the development and execution of the company’s overall security strategy, from defining policies and managing risk to protecting physical and digital assets. The role leads enterprise security and IT risk management, drives compliance with standards such as ISO 27001 and NIST, and oversees both cybersecurity and physical security operations. Works closely with executive leadership to communicate risk, manage incidents, and ensure business continuity, while building a strong security culture across the organisation. Requires 8+ years of experience in information security, including significant leadership experience.

Mission

Keep Constructor’s people, data, and systems secure — set the strategy, own the risk, and build a security culture the whole organisation trusts.

Education

• Bachelor’s degree or higher in Computer Science, Information Security, or a related field. Relevant certifications (CISSP, CISM, ISO 27001 Lead Auditor) are an advantage.

Responsibilities

• Define and execute the company-wide information security strategy and policies.
• Lead enterprise security and IT risk management programs.
• Drive compliance with frameworks such as ISO 27001 and NIST.
• Oversee cybersecurity and physical security operations.
• Lead incident response and business continuity planning.
• Advise executive leadership on security risk and build a security-aware culture.

Qualifications & Experience

• 8+ years of experience in information security, including 3+ years in a leadership role.
• Strong expertise in cybersecurity, risk management, and security frameworks.
• Hands-on knowledge of ISO 27001, NIST, and related standards.
• Experience leading incident response and security operations.
• Ability to communicate risk clearly to technical and executive audiences.

Nice to Have (Not Obligatory)

• Industry certifications (CISSP, CISM, CISA, or equivalent).
• Experience securing cloud-native (Kubernetes) and CI/CD (GitLab) environments.
• Exposure to regulated or fast-scaling technology organisations.