Head of Cybersecurity and Infrastructure

Key Responsibilities:

• Infrastructure Strategy & Operations

Develop and implement the infrastructure roadmap for end-user devices, networks, data centers, and/or cloud environments, ensuring a balance between availability, performance, security, and cost efficiency. Manage daily IT operations and service management, maintaining high system uptime, enhancing user experience, and ensuring effective vendor performance.

• Cybersecurity Strategy & Security Operations

Lead the cybersecurity strategy and operating model, which includes overseeing security architecture, managing threats and vulnerabilities, incident response, and security monitoring (either in-house or through outsourced SOC). Ensure robust detection and response processes, establish strong security baselines, and achieve measurable improvements in resilience.

• Governance, Risk & Compliance (Technology GRC)

Develop and uphold security policies, standards, procedures, and governance frameworks that align with regulatory requirements and industry best practices (e.g., PDPA, ISO 27001, NIST). Conduct risk assessments across infrastructure, cloud services, applications, and emerging technologies; monitor remediation efforts and report significant risks and key risk indicators (KRIs) to senior leadership and Board members.

• Security Architecture & Secure-by-Design Enablement

Facilitate infrastructure and security design reviews for significant projects to ensure that security considerations are integrated from the outset. Provide guidance to technology teams on secure configurations, identity and access management, network segmentation, hardening standards, and secure cloud adoption practices.

• Third-Party & Vendor Management

Oversee critical technology and security vendors and service providers, ensuring effective governance, adherence to service level agreements (SLAs), and positive outcomes. Conduct third-party risk assessments for essential suppliers and assist with remediation efforts as needed.

• Audit & Inspection Management

Facilitate both internal and external audits, security evaluations, and regulatory inspections. Ensure the timely provision of documentation, address audit findings promptly, and foster continuous improvement of control maturity.

• People Leadership

Guide, mentor, and develop teams focused on infrastructure, end-user support, and security. Cultivate a high-performance culture characterized by clear accountability, ongoing skill enhancement, and strong collaboration across IT and business units.

Qualifications:

• A minimum of 10+ years of progressive experience in infrastructure, cybersecurity, and/or technology risk management, with recent experience in a leadership capacity.
• Extensive experience in network and cloud infrastructure operations, IT service management, and cybersecurity governance.
• Demonstrated success in leading security operations, managing vulnerability assessments, incident response, and security monitoring/SOC oversight.
• Practical knowledge of security architecture controls (e.g., IAM, endpoint security, network security, WAF, EDR, SIEM) and contemporary cloud/hybrid environments.
• Proven experience in managing audits, inspections, and remediation initiatives; experience in regulated environments is a plus.