Head of Information Security - Singapore

Our mission Constructor’s mission is to enable all educational organisations to provide high-quality digital education to 10x people with 10x efficiency. With strong expertise in machine intelligence and data science, Constructor’s all-in-one platform for education and research addresses today’s pressing educational challenges: access inequality, tech clutter, and low engagement of students. Please send your resume in English only. Owns the development and execution of the company’s overall security strategy, from defining policies and managing risk to protecting physical and digital assets. The role leads enterprise security and IT risk management, drives compliance with standards such as ISO 27001 and NIST, and oversees both cybersecurity and physical security operations. Works closely with executive leadership to communicate risk, manage incidents, and ensure business continuity, while building a strong security culture across the organisation. Requires 8+ years of experience in information security, including significant leadership experience. Mission Keep Constructor’s people, data, and systems secure — set the strategy, own the risk, and build a security culture the whole organisation trusts. Education Bachelor’s degree or higher in Computer Science, Information Security, or a related field. Relevant certifications (CISSP, CISM, ISO 27001 Lead Auditor) are an advantage. Responsibilities Define and execute the company-wide information security strategy and policies. Lead enterprise security and IT risk management programs. Drive compliance with frameworks such as ISO 27001 and NIST. Oversee cybersecurity and physical security operations. Lead incident response and business continuity planning. Advise executive leadership on security risk and build a security-aware culture. Qualifications & Experience 8+ years of experience in information security, including 3+ years in a leadership role. Strong expertise in cybersecurity, risk management, and security frameworks. Hands-on knowledge of ISO 27001, NIST, and related standards. Experience leading incident response and security operations. Ability to communicate risk clearly to technical and executive audiences. Nice to Have (Not Obligatory) Industry certifications (CISSP, CISM, CISA, or equivalent). Experience securing cloud-native (Kubernetes) and CI/CD (GitLab) environments. Exposure to regulated or fast-scaling technology organisations. What We Offer 💻 Choice of work equipment (e.g., laptop, monitor, etc.) 🇬🇧 English classes (iTalki – $130 monthly) ⏰ Flexible schedule (we usually work between 09:00/10:00 and 18:00/19:00 CET or EET) 👶 Newborn bonus (€500 per child) 🧠 Patent remuneration 🌴 Paid leave 🧑‍💻 Remote work in locations without our offices Hybrid work in locations with offices (2 days in-office, 3 days remote) Constructor fosters equal opportunity for people of all backgrounds and identities. We are led by a gender-balanced board committed to building a diverse and inclusive organisation where everyone can become their best self. We do not discriminate based on age, disability, gender identity, sexual orientation, ethnicity, race, religion or belief, parental and family status, or other protected characteristics. We welcome applications from women, men and non-binary candidates of all ethnicities and socio-economic backgrounds. We encourage people belonging to underrepresented groups to apply.