Director, Cybersecurity (Governance, AI Trust and Assurance)

Introduction

Reporting to the Chief Information Security Officer (CISO), you will lead the Governance and Oversight function within Temasek Cybersecurity Department and play a pivotal role in shaping and advancing the firm's Cyber Trust & Assurance capabilities. You will enable the secure, and resilient adoption of digital, AI and emerging technologies, helping to build the trusted foundations that support innovation, strengthen resilience and safeguard long-term value.

As technology continues to transform how organisations operate, create value and compete, trust will become an increasingly important strategic differentiator. This role is responsible for helping ensure that innovation is underpinned by appropriate governance, independent assurance and risk-informed decision making. You will provide independent oversight and assurance across cybersecurity, AI, digital and emerging technology initiatives while helping to mature enterprise capabilities in Responsible Innovation, AI Trust & Assurance and technology risk governance.

With a concurrent appointment as Business Information Security Officer (BISO), you will serve as a trusted advisor to assigned Business Units, partnering closely with them to understand business strategies, investment priorities and technology ambitions. Through early engagement and proactive partnership, you will help shape secure, trusted and resilient outcomes that enable innovation while safeguarding Temasek's reputation, resilience and long-term interests from the outset.

Beyond Temasek, you will contribute to stronger collective resilience across the Temasek ecosystem and Portfolio Companies (TPCs), promoting leading practices in cyber resilience, AI assurance and responsible technology adoption. At its heart, this role is about stewarding trust and enabling secure and responsible innovation for the future, enabling Temasek and its ecosystem to embrace technological opportunities while protecting resilience, reputation and long-term value.

Responsibilities

1. Cyber Trust, Assurance & Governance Leadership

• Lead the Governance and Oversight team and set the strategic direction for enterprise cyber governance, independent assurance and risk oversight.
• Develop, maintain and continuously enhance enterprise-wide cybersecurity, AI security, technology risk and assurance frameworks, policies, standards and control requirements.
• Establish governance and assurance mechanisms that enable the secure, responsible and trustworthy adoption of digital, AI and emerging technologies.
• Partner closely with the CISO to provide independent oversight and effective challenge across material cyber, AI and emerging technology risks.
• Advise senior management and governance committees on significant risks, control gaps, strategic implications and areas requiring judgement or decision.
• Monitor regulatory, industry and technology developments and translate them into practical enhancements to the firm’s governance and assurance posture.

2. Responsible Innovation & Technology Enablement

• Champion Responsible Innovation and embed secure-by-design, resilient-by-design and assurance-by-design principles across the technology lifecycle.
• Partner with Business Units, Technology and other stakeholders from ideation through design, build, testing, deployment and ongoing operation.
• Shape proportionate guardrails and assurance approaches that support business agility while safeguarding security, resilience and stakeholder confidence.
• Provide strategic risk advice on digital transformation, data, automation, cloud, AI, autonomous agents and other emerging technologies.
• Help translate risk appetite, policy and standards into clear and practical requirements that enable responsible adoption at pace.

3. Business Information Security Officer (BISO) Leadership

• Serve as the Cyber relationship lead and trusted advisor for assigned Business Units.
• Build enduring relationships with business leaders and develop a deep understanding of their strategies, operating priorities, digital needs, investment plans and technology roadmaps.
• Establish early and continuous engagement so that Cyber is involved upfront in material digital, AI and emerging technology initiatives.
• Bring together the appropriate Cyber capabilities to support the secure design, build and deployment of business solutions, while fostering shared ownership of cyber resilience and responsible innovation.
• Translate business objectives into risk-informed cyber, trust and assurance priorities, and communicate technology risk in clear business terms.

4. AI Trust & Assurance and Emerging Technology Oversight

• Lead the governance, risk assessment and independent assurance of AI systems, models, autonomous agents and emerging technology deployments.
• Establish and mature risk-based methodologies for AI security, model and solution assurance, agent governance, testing and ongoing oversight.
• Evaluate risks relating to security, privacy, resilience, safety, reliability, misuse, excessive autonomy and regulatory compliance.
• Oversee the assessment of threats such as prompt injection, data leakage, model manipulation, adversarial AI, AI supply-chain compromise and other evolving risks.
• Monitor Generative AI, Agentic AI, Frontier AI, Quantum and broader emerging technology developments, and assess their implications for Temasek’s risk posture and control environment.

5. Enterprise Risk Oversight, Independent Assurance and Reporting

• Lead independent reviews, thematic assessments and assurance activities across cyber, AI and technology domains.
• Maintain enterprise cyber and AI risk registers and oversee effective risk remediation and treatment.
• Assess governance effectiveness, control maturity and adherence to enterprise standards and regulatory requirements.
• Develop meaningful risk indicators, assurance metrics and executive reporting for senior management and governance committees.
• Drive continuous improvement in assurance capabilities through analytics, automation and modern oversight practices.

6. People Leadership & Capability Development

• Lead, coach and develop a high-performing Governance and Oversight team with the judgement, technical depth and business orientation required for an evolving mandate.
• Build multidisciplinary capability across cyber governance, AI security, assurance, emerging technology risk and BISO engagement.
• Promote a culture of curiosity, collaboration, accountability and constructive challenge across Cyber and its partners.

7. Ecosystem Partnerships & Collective Resilience

• Facilitate sharing of leading practices, lessons learnt and ecosystem-wide collaboration initiatives.
• Engage strategic partners, industry peers and government agencies on emerging cyber, AI and resilience challenges.
• Contribute to strengthen collective resilience and trust across Temasek's broader ecosystem.

Requirements

Experience

• At least 12 years of experience in cybersecurity, technology risk, governance, assurance, security architecture, digital transformation, consulting, or related disciplines, including significant leadership responsibility.
• Proven track record leading enterprise cybersecurity governance, risk and assurance functions within a complex organisation.
• Experience partnering with senior business and technology leaders, Boards, governance committees, regulators and external stakeholders on strategic technology, cyber and risk matters.
• Practical experience in AI governance, AI security, Responsible AI, model assurance, agent governance or emerging technology oversight.
• Experience leading multidisciplinary teams, influencing outcomes across organisational boundaries and driving enterprise-wide change.
• Experience in financial services, investment management, technology or other regulated and internationally connected environments is advantageous.
  
  

Technical & Domain Expertise

• Degree in Cybersecurity, Information Security, Computer Science, Engineering, AI/Machine Learning, Technology Risk, or a related discipline.
• Strong expertise in cybersecurity governance, enterprise risk management, resilience, assurance, and control effectiveness.
• Broad understanding of enterprise security domains, including security architecture, cloud, applications, identity, data protection, cyber defence, and third-party risk.
• Deep expertise in AI security and assurance, including Generative AI, Large Language Models, Agentic AI, model governance, adversarial threats, and AI supply-chain risk.
• Familiarity with relevant cybersecurity and AI governance frameworks and regulations, including MAS TRM, NIST, and ISO standards. Relevant certifications such as CISSP, CISA, CRISC, CCSP, CGEIT, CDPSE, or AI governance/security credentials are advantageous.

Key Attributes

• Strategic and forward-looking leader with strong business acumen and executive presence.
• Strong communicator and trusted advisor who can translate complex cyber, AI and technology risks into clear business decisions, while balancing innovation, resilience and risk in a pragmatic and business-aligned manner.
• Independent and objective, with the confidence and judgement to provide constructive challenge and escalate material risks and issues appropriately.
• Collaborative people leader who develops high-performing teams, fosters diverse perspectives and promotes a culture of accountability, learning and constructive challenge.