Director, Strategic Transformation

Overview We are seeking a highly experienced and visionary Director of Strategic Transformation to join our Cybersecurity Consulting practice. This role is responsible for leading large-scale, high-impact business and cybersecurity transformation initiatives across the region, engaging with C-suite stakeholders and board-level executives. The Director will act as a trusted advisor, shaping long-term cybersecurity and digital transformation strategies that align with clients’ business imperatives and evolving threat landscapes. As a leader, you will not only drive client-facing delivery but also play a key role in the firm’s growth by developing new offerings, driving thought leadership, mentoring teams, and expanding our regional advisory capabilities. Responsibilities Serve as a principal advisor to executives and board members on strategic cybersecurity and digital transformation matters. Develop and lead trusted executive relationships, creating strategic alignment between client business priorities and cybersecurity goals. Manage the P&L of the team, aligned to the Consulting team and Ensign's business objectives. Influence enterprise-wide transformation strategies with an integrated view of business, technology, risk, and compliance. Lead the design and execution of holistic cybersecurity strategies across diverse industries, incorporating risk, governance, business context, and regulatory drivers. Integrate business transformation and change management principles to ensure organisational buy-in and sustainable outcomes. Drive the development of multi-year roadmaps, ensuring alignment of cybersecurity investments with long-term business value. Oversee the delivery of complex, multi-disciplinary advisory engagements, ensuring high-quality execution, client satisfaction, and strategic impact. Utilise design-thinking and systems-thinking methodologies to assess problems, define hypotheses, test solutions, and iterate impactful outcomes. Advise clients on integrating cybersecurity with broader enterprise risk management and digital innovation strategies. Spearhead thought leadership initiatives, including whitepapers, speaking engagements, and industry panels. Monitor and interpret emerging trends in cybersecurity, geopolitics, digital regulation, and business to shape advisory insights and offerings. Represent the firm as a subject matter expert (SME) in external forums, client briefings, and key stakeholder meetings. Lead, mentor, and develop high-performing advisory teams across regions, fostering a culture of excellence, collaboration, and continuous improvement. Build and scale the firm's regional cybersecurity advisory capabilities, including developing methodologies, frameworks, and reusable assets. Oversee the development of governance frameworks, cybersecurity policies, operational models, and risk management documentation. Ensure best practices are captured and institutionalized in firm-wide knowledge repositories. Collaborate with internal leadership across practices (e.g., threat intelligence, incident response, digital forensics) to deliver integrated services. Provide strategic input into firm-wide cybersecurity strategy, go-to-market planning, and capability investments. Support regional business development, account planning, and client acquisition efforts. Requirements 10+ years of relevant experience in cybersecurity, technology consulting, or strategic transformation, including 8+ years in a leadership or executive advisory role. Proven track record of leading complex, multi-stakeholder transformation programs at enterprise scale. Deep experience engaging with executive leadership, regulators, and board-level stakeholders. Extensive experience in cybersecurity risk management, maturity assessments, strategic roadmapping, and business-case development. Strong consulting background with experience leading multidisciplinary teams and regional delivery functions. Demonstrated experience in incident/crisis response, governance documentation, and regulatory compliance projects. Proven ability to lead regional teams and manage strategic accounts. Excellent communication, facilitation, and presentation skills. Education and Certifications Master’s degree in Business Administration, Cybersecurity, Public Policy, Law, Computer Science, or a related field preferred. Bachelor’s degree in Computer Science, Information Systems, Engineering, or equivalent. Industry certifications such as CISSP , CISM, CRISC , CISA , or equivalent are required. Additional certifications in strategy, leadership, or enterprise architecture (e.g., TOGAF, PMP, CGEIT) are advantageous. Preferred Skills and Experience In-depth knowledge of global and regional cybersecurity regulations (e.g., NIST, ISO 27001/2, IEC 62443, MAS-TRM, GDPR, PDPA, etc.). Familiarity with developing and implementing cybersecurity strategies, crisis simulation exercises, and executive-level tabletop scenarios. Experience in threat intelligence, geopolitical risk, and critical infrastructure protection is a plus. Fluency in one or more Asian languages is advantageous. Ability to travel regionally up to 25–30%. #J-18808-Ljbffr