Chief Information Security Officer

About the Position

We're seeking a Chief Information Security Officer (CISO) for BVNK in Singapore to lead our information security function.

About Us

BVNK is the stablecoin-powered financial stack for enterprises. We're now part of Mastercard, and together we're building a network for every form of money – one that delivers more reach, more capability and more choice.

We enable businesses to build financial products, unlock new markets, and move money in seconds across 130+ countries, with 40+ licenses for fiat and digital assets globally. Processing billions annually, we empower enterprises worldwide to send, receive, convert, and settle stablecoins and fiat seamlessly through a single integration.

We're a diverse team spread across EMEA, North America, and APAC, with a shared belief that stablecoins are the new infrastructure layer for financial services, and that BVNK is at the forefront of this shift.

Responsibilities

• Ensure BVNK's Singapore operations remain compliant with MAS technology risk, data protection and operational resilience requirements.
• Own and lead the implementation of the information security strategy and programme for BVNK's Singapore business based on the global standards.
• Build the Singapore security function by establishing the necessary governance, policies, standards, controls and processes required to support a regulated financial services business.
• Act as the senior point of accountability for information and cyber security in Singapore, providing clear oversight of the global security functions and reporting to the Singapore CEO and relevant governance forums, setting up KPIs, SLAs, dashboards, and regular reports.
• Establish and maintain an effective information security risk management framework, ensuring material security risks are identified, assessed, managed and appropriately escalated.
• Work closely with the Global CSO and wider global Security organisation to implement BVNK's global security standards while identifying and addressing Singapore-specific requirements.
• Own the regulatory and legal dimensions of security incident management, knowing when and how to notify MAS, meeting notification SLAs, preparing post-incident reports and managing the regulatory relationship through to closure.
• Advise Product and Business teams on what new products and services require from a Singapore regulatory perspective, ensuring local compliance obligations are met before launch.
• Support the information security aspects of regulatory applications, examinations, audits and assessments, working closely with Risk, Compliance, Legal, and Technology.
• Establish appropriate security governance, metrics and reporting, providing the Singapore leadership team with clear visibility of the organisation's security posture and key risks.
• Oversee information security risks associated with third parties and critical technology service providers.
• Build security awareness and accountability across the Singapore organisation, ensuring colleagues understand their responsibilities in protecting BVNK and our customers.
• Represent BVNK's Singapore security function with regulators, auditors, partners and other external stakeholders where required.

Requirements

• Strong knowledge of the Singapore financial services regulatory environment, with experience working with MAS technology risk, cyber security and operational resilience expectations.
• Significant experience in senior information security, cyber security or technology risk leadership roles within regulated financial services, payments, banking or fintech with demonstrated increase of complexity between roles.
• Bachelor or equivalent degree in information security, technology, audit or similar discipline.
• Security certifications like CISSP, CISM, CISA will be considered an advantage.
• Understanding of the Singapore privacy regulations and their application in financial and fintech services, while experience in a company operating on a global scale is considered an advantage.
• Strong knowledge across security governance, technology risk, regulatory compliance, audit facilitation and incident management from a legal and compliance perspective.
• Experience engaging with regulators and supporting regulatory applications, examinations, audits and security assessments.
• The ability to translate complex technical and regulatory requirements into pragmatic controls and clear business decisions.
• Strong executive-level stakeholder management skills, with the credibility to advise senior leadership and challenge decisions where appropriate.
• Experience working within an international organisation and collaborating effectively with global security and technology teams.
• Excellent written and verbal communication skills, with the ability to communicate security risk clearly to technical and non-technical audiences.
• Experience with GRC platforms like Vanta, Drata or similar tools will be considered an advantage.

We Offer

• Fair and competitive salary at every stage of your growth as a product manager
• Flexible working hours, with hybrid working at its heart
• A MacBook and the accessories you need
• A culture built on passionate growth minded people
• A flexible approach to holiday
• Opportunities to travel to our offices around the world, in locations such as London and Cape Town, to collaborate with your colleagues
• An open and creative environment where you can help us define the future of BVNK, it’s culture, and it’s opportunity sets

At BVNK, we are focused on building a diverse and inclusive team. While you may not meet all of our requirements, we’d encourage you to apply if you meet the majority of our expectations. This is as you may be a great fit for this role or another role in our team.