{"id":819634,"url":"https://alion.io/job/floenergy-cybersecurity-lead","title":"Cybersecurity Lead","company":{"id":674995,"name":"Flo Energy","domain":"floenergy.sg","url":"https://alion.io/company/floenergy","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":220000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":330},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-01-08T05:42:03Z","employer_posted_date":"2026-01-08","last_verified_at":"2026-09-27T19:37:10Z","board_verified":true,"closed_at":null,"days_open":262,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":261},"description":"About Flo Energy\nHi, we are Flo! We are on a mission to switch as many people and businesses as possible to affordable, renewable solutions.\nWe began in a small shophouse in Singapore and have grown rapidly ever since, expanding into Australia with even bigger plans ahead.\nUnlike other retailers, we have built our own best-in-class energy platform entirely in-house. Designed specifically for the sector, it automates complex processes and keeps costs down, letting us offer genuinely affordable products to our customers.\nBehind Flo is a diverse team of passionate engineers, data scientists, operators, and energy experts. We come from different backgrounds, but we are united by the shared goal of creating a more sustainable future. If you want to make an impact and help accelerate the renewable energy transition, we would love to meet you.\nFind out more about us on https://floenergy.sg/business\nAbout the role\nAt Flo, security is a shared responsibility. As the Senior Security Lead, you will be responsible for driving Flo's cybersecurity governance, risk management, compliance, and overall security strategy.\nYou will establish security policies, standards, and governance processes while working closely with Engineering, Infrastructure, Legal, Compliance, and business stakeholders to ensure security is embedded across our people, processes, and technology.\nThis role is primarily focused on security governance and leadership. While you are not expected to implement every technical security control, you should have a solid understanding of modern security practices and provide governance, oversight, and guidance across cloud security, application security, security operations, and IT initiatives.\nAs the lead of Flo's Security Guild, you will foster collaboration, provide security guidance, and help teams build and operate secure solutions.\nWhat you'll do:\nAs the Senior Security Lead, you will be responsible for defining and driving the organisation's cybersecurity strategy while supporting secure business growth and regulatory compliance.\nSecurity Governance & Policy\nDefine and execute Flo's cybersecurity strategy and roadmap.\nDevelop and maintain security policies, standards, and governance frameworks.\nDevelop and maintain Flo's Cloud Security Framework and security baselines to support secure cloud adoption.\nOwn the cybersecurity risk register and conduct security risk assessments.\nLead compliance initiatives including ISO 27001, SOC 2, PDPA, and other applicable frameworks.\nSecurity Advisory & Oversight\nProvide security guidance for projects, cloud environments, applications, and technology initiatives.\nPromote Secure SDLC, threat modelling, and security best practices across Engineering teams.\nProvide governance and oversight of security capabilities such as SIEM, EDR/XDR, IAM and MDM.\nCoordinate incident response activities and support continuous improvement of security controls.\nSecurity Leadership\nLead cross-functional security initiatives and projects that improve Flo's overall security posture.\nWork closely with Engineering and Infrastructure teams to implement security improvements across applications, cloud platforms, infrastructure, and business systems.\nIdentify security gaps and work with Engineering, Infrastructure, and business teams to implement appropriate security improvements.\nLead Flo's Security Guild, facilitating security discussions, sharing best practices, and serving as the primary point of contact for security-related guidance.\nPromote security awareness and foster a strong security culture across the organisation\nSecurity Awareness & Culture\nDevelop and maintain Flo's security awareness programme.\nLead security awareness initiatives, phishing simulations, and security training.\nPromote a strong security culture across the organisation\nThird-Party Security\nAssess the security of new and existing vendors, SaaS platforms, and third-party service providers.\nEvaluate security risks and provide recommendations during vendor selection.\nWork with Legal and business stakeholders to address security requirements during vendor engagements.\nMonitor third-party security risks throughout the vendor lifecycle\nQualifications\nBachelorʼs degree in Cybersecurity, Computer Science, Information Security, or a related field.\nStrong experience in cybersecurity leadership, governance, and risk management.\nExperience developing cybersecurity strategies, roadmaps, and security programs.\nStrong understanding of cloud security, application security, and secure architecture principles.\nExperience with threat modelling, security reviews, vulnerability management, and Secure SDLC.\nFamiliarity with SIEM, EDR, incident response, and security monitoring practices.\nExperience managing security awareness and phishing simulation programs.\nFamiliarity with compliance frameworks such as ISO 27001, SOC 2, and PDPA.\nStrong stakeholder management, communication, and influencing skills.\nAbility to translate technical security risks into business-focused recommendations.\nRelevant certifications such as CISSP, CISM, CRISC, CCSP, ISO 27001 Lead\nImplementer/Auditor, or equivalent are advantageous.","description_format":"text","description_chars":5168,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Energy & Utilities","Solar Energy"],"lifecycle":[{"event":"open","at":"2026-09-12T12:26:51Z"}],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.214,"p_room":0.28,"age_days":262,"expected_fill_days":24,"reasons":["conf:9","velocity","win:tail","crowd:"],"computed_at":"2026-09-27T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/floenergy-cybersecurity-lead","json_url":"https://alion.io/job/floenergy-cybersecurity-lead.json","meta":{"generated_at":"2026-09-28T02:57:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1813,"day_limit":5000,"remaining_today":3187,"minute_limit":60,"resets_at":"2026-09-29T00:00:00Z"}}}