Position Overview
This role focuses on overseeing and managing the cybersecurity framework across the APAC region, including China. The individual will address cyber threats, design and implement tailored security solutions, and ensure compliance with information security standards and policies. The scope involves safeguarding the organization’s systems and protecting customer data.
Key Objectives:
- Respond to and manage cybersecurity threats and vulnerabilities effectively.
- Develop and implement cybersecurity strategies and solutions specific to regional requirements.
- Oversee information security measures, ensuring policies are reviewed, enforced, and access is properly secured.
- Ensure the security of IT systems and digital platforms by establishing robust security protocols and technologies.
- Stay informed about emerging cyber threats and deploy updated defenses accordingly.
- Review and enhance authorization and security measures, adopting a zero-trust security approach.
- Conduct periodic security audits to identify and address vulnerabilities.
- Respond promptly to security incidents, coordinating with local IT managers to mitigate risks.
- Educate and update the organization on cybersecurity practices and improvements.
- Maintain up-to-date documentation to support cybersecurity initiatives.
- Collaborate with the global information security team to implement and maintain corporate security standards at the regional and departmental levels.
- Serve as the local owner of the corporate Information Security Handbook, where applicable.
- Develop and maintain security frameworks for departments or subsidiaries.
- Evaluate information security risks and implement measures to strengthen the organization’s security posture.
- Report security incidents to the global information security team and act as a liaison for communication and response.
- Participate in training programs and share relevant materials with local teams to enhance security awareness.
- Foster relationships with local institutions and stakeholders where necessary.
Qualifications and Skills:
- Expertise in cybersecurity technologies and strategies.
- Experience in incident response and managing information security frameworks.
- Strong understanding of zero-trust principles and security auditing.
- Ability to communicate and coordinate with global and local teams effectively.
- Commitment to continuous learning and improvement in cybersecurity practices.