Roles & Responsibilities
We are seeking a highly experienced and visionary Director of Strategic Transformation to join our Cybersecurity Consulting practice. This role is responsible for leading large-scale, high-impact business and cybersecurity transformation initiatives across the region, engaging with C-suite stakeholders and board-level executives. The Director will act as a trusted advisor, shaping long-term cybersecurity and digital transformation strategies that align with clients’ business imperatives and evolving threat landscapes.
As a leader, you will not only drive client-facing delivery but also play a key role in the firm’s growth by developing new offerings, driving thought leadership, mentoring teams, and expanding our regional advisory capabilities.
Key Responsibilities :
- Serve as a principal advisor to executives and board members on strategic cybersecurity and digital transformation matters.
- Develop and lead trusted executive relationships, creating strategic alignment between client business priorities and cybersecurity goals.
- Manage the P&L of the team, aligned to the Consulting team and Ensign's business objectives.
- Influence enterprise-wide transformation strategies with an integrated view of business, technology, risk, and compliance.
- Lead the design and execution of holistic cybersecurity strategies across diverse industries, incorporating risk, governance, business context, and regulatory drivers.
- Integrate business transformation and change management principles to ensure organisational buy-in and sustainable outcomes.
- Drive the development of multi-year roadmaps, ensuring alignment of cybersecurity investments with long-term business value.
- Oversee the delivery of complex, multi-disciplinary advisory engagements, ensuring high-quality execution, client satisfaction, and strategic impact.
- Utilise design-thinking and systems-thinking methodologies to assess problems, define hypotheses, test solutions, and iterate impactful outcomes.
- Advise clients on integrating cybersecurity with broader enterprise risk management and digital innovation strategies.
- Spearhead thought leadership initiatives, including whitepapers, speaking engagements, and industry panels.
- Monitor and interpret emerging trends in cybersecurity, geopolitics, digital regulation, and business to shape advisory insights and offerings.
- Represent the firm as a subject matter expert (SME) in external forums, client briefings, and key stakeholder meetings.
- Lead, mentor, and develop high-performing advisory teams across regions, fostering a culture of excellence, collaboration, and continuous improvement.
- Build and scale the firm's regional cybersecurity advisory capabilities, including developing methodologies, frameworks, and reusable assets.
- Oversee the development of governance frameworks, cybersecurity policies, operational models, and risk management documentation.
- Ensure best practices are captured and institutionalized in firm-wide knowledge repositories.
- Collaborate with internal leadership across practices (e.g., threat intelligence, incident response, digital forensics) to deliver integrated services.
- Provide strategic input into firm-wide cybersecurity strategy, go-to-market planning, and capability investments.
- Support regional business development, account planning, and client acquisition efforts.
Requirements :
10+ years of relevant experience in cybersecurity, technology consulting, or strategic transformation, including 8+ years in a leadership or executive advisory role.Proven track record of leading complex, multi-stakeholder transformation programs at enterprise scale.Deep experience engaging with executive leadership, regulators, and board-level stakeholders.Extensive experience in cybersecurity risk management, maturity assessments, strategic roadmapping, and business-case development.Strong consulting background with experience leading multidisciplinary teams and regional delivery functions.Demonstrated experience in incident / crisis response, governance documentation, and regulatory compliance projects.Proven ability to lead regional teams and manage strategic accounts.Excellent communication, facilitation, and presentation skills.Education and Certifications :
Master’s degree in Business Administration, Cybersecurity, Public Policy, Law, Computer Science, or a related field preferred.Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent.Industry certifications such as CISSP , CISM, CRISC , CISA , or equivalent are required.Additional certifications in strategy, leadership, or enterprise architecture (e.g., TOGAF, PMP, CGEIT) are advantageous.Preferred Skills and Experience :
In-depth knowledge of global and regional cybersecurity regulations (e.g., NIST, ISO 27001 / 2, IEC 62443, MAS-TRM, GDPR, PDPA, etc.).Familiarity with developing and implementing cybersecurity strategies, crisis simulation exercises, and executive-level tabletop scenarios.Experience in threat intelligence, geopolitical risk, and critical infrastructure protection is a plus.Fluency in one or more Asian languages is advantageous.Ability to travel regionally up to 25–30%.Tell employers what skills you have
Mentoring
Change Management
Enterprise Risk Management
Risk Management
Administration
Thought Leadership
Presentation Skills
Consulting
Business Transformation
Facilitation