Head of Security Engineering & Architecture- APAC- Remote- 10k

About the Role

We are seeking an experienced Head of Security Engineering to lead our enterprise security engineering function across cloud, infrastructure, endpoints, and security architecture. This leadership role is responsible for defining the organization's technical security strategy, overseeing multiple security engineering domains, and ensuring security controls are aligned with business objectives, regulatory requirements, and industry best practices.

You will lead managers and specialist teams responsible for vulnerability management, cloud security, endpoint security, security architecture, and security operations tooling, while maintaining overall accountability for application and product security through the teams you oversee. You will also act as a trusted advisor to senior leadership, helping shape the organization's cybersecurity strategy and security-first culture.

What You'll Do

• Lead the enterprise security engineering function, including vulnerability management, cloud security, endpoint security, workspace security, and security architecture.
• Define the technical security strategy, engineering standards, and security roadmaps aligned with business goals and regulatory requirements.
• Drive the design, implementation, and continuous improvement of security controls across AWS, Azure, Google Cloud Platform (GCP), and Microsoft 365 environments.
• Oversee enterprise vulnerability management, including asset coverage, risk prioritization, remediation tracking, reporting, and security posture improvement.
• Define and maintain enterprise security architecture, including reference architectures, security design standards, architecture reviews, and threat modelling processes.
• Oversee the effectiveness and integration of security operations technologies to improve detection, response, and operational resilience.
• Provide strategic oversight for application security and product security, partnering with specialist teams to ensure secure software development and product delivery.
• Champion the responsible adoption of AI and Generative AI within the security function, leveraging AI to improve detection, vulnerability analysis, automation, and operational efficiency while ensuring AI solutions are securely governed.
• Partner closely with senior business and technology leaders to influence security strategy, drive risk-based decision making, and promote a strong security culture.
• Support security governance initiatives, including ISO 27001, SOC 2, PCI DSS, and other audit and compliance programs.
• Build, mentor, and develop high-performing security engineering teams, fostering a culture of accountability, innovation, collaboration, and continuous improvement.

What We're Looking For

• 10+ years of experience in cybersecurity, including at least 3 years leading Security Engineering, Security Operations, or Infrastructure Security teams.
• Strong expertise across vulnerability management, cloud security, endpoint security, enterprise security architecture, and Microsoft 365 security.
• Hands-on experience with enterprise vulnerability management platforms such as Qualys, Tenable, Rapid7, or equivalent.
• Proven experience designing and governing enterprise security architecture and technical security standards.
• Solid understanding of application security and product security principles, with experience overseeing specialist security teams.
• Experience securing enterprise cloud environments across AWS, Azure, and Google Cloud Platform (GCP).
• Practical experience leveraging AI and Generative AI technologies to improve security operations and engineering workflows.
• Knowledge of AI security, governance, model risks, and emerging regulatory frameworks (e.g., EU AI Act, NIST AI Risk Management Framework) is highly desirable.
• Experience supporting compliance frameworks such as ISO 27001, SOC 2, PCI DSS, or equivalent regulatory standards.
• Strong understanding of enterprise risk management, security governance, and cybersecurity best practices.
• Excellent leadership, stakeholder management, communication, analytical, and problem-solving skills.
• Bachelor's degree in Computer Science, Information Security, or a related discipline.
• Professional certifications such as CISSP, CISM, CCSP, AWS Security Specialty, Azure Security Engineer, or equivalent are highly desirable.

Argyll Scott Asia is acting as an Employment Business in relation to this vacancy.