Field CISO APAC

About Mimecast

Mimecast is a global leader in cybersecurity, pioneering approaches to mitigate human-related cyber risks. Our AI-driven, API-integrated Human Risk Management platform protects organizations from diverse cyber threats by combining leading technology with human-centric strategies, offering comprehensive visibility, strategic insights, and decisive interventions. Trusted by over 42,000 organizations worldwide, we maintain a position of leadership recognized by Gartner® in both Email Security and DCGAS.

Our platform encompasses multiple domains including email security, insider risk management (Incydr), human risk awareness and training (Mimecast Engage), and the Human Risk Command Center, providing a centralized view to assess and manage human risk across organizations. The recent expansion of Incydr into runtime data security improves unified oversight over both human and AI agent risks.

Within APAC, Mimecast operates offices in Singapore, Melbourne, and Sydney, ensuring strong regional presence with established teams and customer relations. Our Resilience Together CSR initiative demonstrates our commitment to supporting underserved communities and fostering long-term relationships in the region.

Role Overview

We seek a Director-level Field Chief Information Security Officer (CISO) based in Singapore who will report to the Global Field CISO. This role involves working onsite at least two days per week and serving as the principal trusted security advisor to our key strategic accounts across APAC.

This position is distinct from pre-sales or customer support roles. Instead, it integrates responsibilities from customer success, executive security advisory, and thought leadership. The Field CISO will bring independent credibility, relationships, and perspectives to elevate customer security outcomes effectively.

Focus areas include guiding customers through the challenge of human risk—a major causative factor behind security breaches linked to user behavior, whether negligent, compromised, or malicious—addressed across email, collaborative applications, endpoints, SaaS environments, and AI agents. Supported by a mature global platform, the Field CISO delivers tailored advisory aligning with regional needs at an executive level.

Key Responsibilities

• Serve as a trusted advisor to CISOs, CTOs, and board members of leading strategic APAC accounts, supporting human risk program development and maturation.
• Assist clients with insider risk strategies, deployment of Incydr, AI agent risk management, and implementation of enterprise risk frameworks, aligning analytic capabilities with business objectives.
• Guide customers through complex audits, compliance inspections, and regulatory requirements within a fragmented APAC environment including PDPA, DIFC, POPIA, Saudi NCA, among others.
• Act swiftly as the primary point of contact for security incidents, regardless of product relevance, embracing challenges proactively.
• Represent Mimecast at prominent APAC security industry events such as GISEC, GITEX, Black Hat MEA, and sector-specific forums, advancing the human risk management discourse.
• Produce thought leadership content, including whitepapers, research articles, and analyses on insider threats, AI security challenges, and evolving risks, contributing to Mimecast’s State of Human Risk studies.
• Develop and maintain a credible professional profile across APAC to amplify Mimecast’s regional authority on human risk.
• Collaborate with sales teams on security-sensitive enterprise deals to expedite sales cycles, increase win rates, especially within regulated sectors such as financial services, telecommunications, government, and critical infrastructure.
• Foster expansion within existing accounts by deepening client relationships and identifying opportunities for broader adoption of Mimecast services.
• Record all advisory-influenced opportunities in CRM systems to demonstrate the impact of Field CISO engagements on customer outcomes and company ROI.
• Relay structured customer insights for product and engineering teams to identify feature gaps in human risk management, coverage of Incydr controls, AI governance, and user-friendly, secure defaults.
• Promote product improvements that reduce audit and compliance burdens for customers, embodying a continuous improvement ethos.
• Participate in the Mimecast CISO Customer Advisory Board and support regional CISO community initiatives to strengthen customer relationships and loyalty.

Required Qualifications and Experience

• Extensive experience (10+ years) in enterprise information security, including a minimum of 3 years holding senior leadership positions such as CISO, VP of Security, or equivalent within enterprise environments, demonstrating operational expertise.
• Bachelor’s degree in computer science, IT, cybersecurity or related fields is required; a Master’s degree is preferred. Equivalent demonstrated professional experience at senior leadership is acceptable.
• Advanced security certifications such as CISSP, CRISC, CISM, GCEIT, or GIAC (or equivalents) mandatory.
• Proven ability to effectively engage and influence top-level executives and boards with professionalism and humility, with genuine multicultural and cross-regional experience across APAC.
• Aptitude for self-direction and autonomy fitting a Director-level individual contributor, requiring minimal day-to-day supervision.

Additional Information

Mimecast supports career growth via learning and development initiatives and offers comprehensive benefits aimed at sustaining employee well-being and fostering cross-functional collaboration.

The hybrid work model expects at least two days per week onsite presence to promote teamwork, communication, and innovation in our Singapore office.

Salary range for this role is SGD 220,000 to SGD 250,000 annually plus benefits, with potential eligibility for incentive plans. Compensation is based on role, level, location, along with qualifications, experience, and skills.

Mimecast is committed to diversity, equity, and inclusion, inviting candidates from diverse backgrounds and ensuring equal opportunity without discrimination based on personal attributes.

Employment offer contingent upon successful background checks compliant with local laws.