Director, Strategic Transformation

We are seeking a highly experienced and visionary Director of Strategic Transformation to join our Cybersecurity Consulting practice. This role is responsible for leading large-scale, high-impact business and cybersecurity transformation initiatives across the region, engaging with C-suite stakeholders and board-level executives. The Director will act as a trusted advisor, shaping long-term cybersecurity and digital transformation strategies that align with clients' business imperatives and evolving threat landscapes.

As a leader, you will not only drive client-facing delivery but also play a key role in the firm's growth by developing new offerings, driving thought leadership, mentoring teams, and expanding our regional advisory capabilities.

Key Responsibilities:

• Serve as a principal advisor to executives and board members on strategic cybersecurity and digital transformation matters.
• Develop and lead trusted executive relationships, creating strategic alignment between client business priorities and cybersecurity goals.
• Manage the P&L of the team, aligned to the Consulting team and Ensign's business objectives.
• Influence enterprise-wide transformation strategies with an integrated view of business, technology, risk, and compliance.
• Lead the design and execution of holistic cybersecurity strategies across diverse industries, incorporating risk, governance, business context, and regulatory drivers.
• Integrate business transformation and change management principles to ensure organisational buy-in and sustainable outcomes.
• Drive the development of multi-year roadmaps, ensuring alignment of cybersecurity investments with long-term business value.
• Oversee the delivery of complex, multi-disciplinary advisory engagements, ensuring high-quality execution, client satisfaction, and strategic impact.
• Utilise design-thinking and systems-thinking methodologies to assess problems, define hypotheses, test solutions, and iterate impactful outcomes.
• Advise clients on integrating cybersecurity with broader enterprise risk management and digital innovation strategies.
• Spearhead thought leadership initiatives, including whitepapers, speaking engagements, and industry panels.
• Monitor and interpret emerging trends in cybersecurity, geopolitics, digital regulation, and business to shape advisory insights and offerings.
• Represent the firm as a subject matter expert (SME) in external forums, client briefings, and key stakeholder meetings.
• Lead, mentor, and develop high-performing advisory teams across regions, fostering a culture of excellence, collaboration, and continuous improvement.
• Build and scale the firm's regional cybersecurity advisory capabilities, including developing methodologies, frameworks, and reusable assets.
• Oversee the development of governance frameworks, cybersecurity policies, operational models, and risk management documentation.
• Ensure best practices are captured and institutionalized in firm-wide knowledge repositories.
• Collaborate with internal leadership across practices (e.g., threat intelligence, incident response, digital forensics) to deliver integrated services.
• Provide strategic input into firm-wide cybersecurity strategy, go-to-market planning, and capability investments.
• Support regional business development, account planning, and client acquisition efforts.

Requirements:

• 10+ years of relevant experience in cybersecurity, technology consulting, or strategic transformation, including 8+ years in a leadership or executive advisory role.
• Proven track record of leading complex, multi-stakeholder transformation programs at enterprise scale.
• Deep experience engaging with executive leadership, regulators, and board-level stakeholders.
• Extensive experience in cybersecurity risk management, maturity assessments, strategic roadmapping, and business-case development.
• Strong consulting background with experience leading multidisciplinary teams and regional delivery functions.
• Demonstrated experience in incident/crisis response, governance documentation, and regulatory compliance projects.
• Proven ability to lead regional teams and manage strategic accounts.
• Excellent communication, facilitation, and presentation skills.

Education and Certifications:

• Master's degree in Business Administration, Cybersecurity, Public Policy, Law, Computer Science, or a related field preferred.
• Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent.
• Industry certifications such as CISSP , CISM, CRISC , CISA , or equivalent are required.
• Additional certifications in strategy, leadership, or enterprise architecture (e.g., TOGAF, PMP, CGEIT) are advantageous.

Preferred Skills and Experience:

• In-depth knowledge of global and regional cybersecurity regulations (e.g., NIST, ISO 27001/2, IEC 62443, MAS-TRM, GDPR, PDPA, etc.).
• Familiarity with developing and implementing cybersecurity strategies, crisis simulation exercises, and executive-level tabletop scenarios.
• Experience in threat intelligence, geopolitical risk, and critical infrastructure protection is a plus.
• Fluency in one or more Asian languages is advantageous.
• Ability to travel regionally up to 25–30%.