Chief Information Security Officer (CISO), Asia Pacific

As a Cybersecurity Governance Manager, you will be responsible for coordinating with Group CISO & the Asia Pacific Region (APR) Risk Management team to adapt central directives, ensure cybersecurity governance, conduct analysis, and organize committees within APR. You will directly report to the Regional Head of Risk Management, Asia Pacific Region (APR). Key Responsibilities: - Adapt the provided set of Group documents to enhance cyber resilience locally - Organize quarterly regional ISS Committee - Cascade risk mapping to the local level - Support the assessment of security of local TP and ensure the follow-up of local remediation actions - Advise on local/regional IT and Cyber Projects arbitrations and implementation follow-up - Enhance cyber risk governance facilitating compliance with DORA Regulation - Support Group on Cyber risk monitoring & controls - Conduct Cyber Risk assessment at the regional level - Oversee the local cybersecurity regulations in Asia Pacific, conduct gap analysis, and define action plans to close the gap with stakeholders - Engage in other risk management activities and projects as required Qualifications Required: - Experience in developing and implementing security strategies and initiatives - In-depth knowledge of security principles, standards, and technologies such as access control, network security, identity management, cyber incident management, and ICT supplier management - Demonstrated deep understanding of information security principles, practices, and technologies - Knowledge of risk management practices and cybersecurity regulatory requirements like DORA and cybersecurity regulatory requirements in Asia Pacific - Solid communication and interpersonal skills to collaborate with stakeholders at all levels - Well-organized, detail-oriented, and a good team player, capable of establishing effective working relationships - Ability to work independently with strong self-motivation Additional Details: - At least 10 years of experience in IT management/cybersecurity governance or related field - Previous exposure in a financial institution is preferred Educational Qualification: - A bachelors degree in information technology, computer science, or a related field is required - One of the following certifications is mandatory: - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) - Certified Information Systems Auditor (CISA) As a Cybersecurity Governance Manager, you will be responsible for coordinating with Group CISO & the Asia Pacific Region (APR) Risk Management team to adapt central directives, ensure cybersecurity governance, conduct analysis, and organize committees within APR. You will directly report to the Regional Head of Risk Management, Asia Pacific Region (APR). Key Responsibilities: - Adapt the provided set of Group documents to enhance cyber resilience locally - Organize quarterly regional ISS Committee - Cascade risk mapping to the local level - Support the assessment of security of local TP and ensure the follow-up of local remediation actions - Advise on local/regional IT and Cyber Projects arbitrations and implementation follow-up - Enhance cyber risk governance facilitating compliance with DORA Regulation - Support Group on Cyber risk monitoring & controls - Conduct Cyber Risk assessment at the regional level - Oversee the local cybersecurity regulations in Asia Pacific, conduct gap analysis, and define action plans to close the gap with stakeholders - Engage in other risk management activities and projects as required Qualifications Required: - Experience in developing and implementing security strategies and initiatives - In-depth knowledge of security principles, standards, and technologies such as access control, network security, identity management, cyber incident management, and ICT supplier management - Demonstrated deep understanding of information security principles, practices, and technologies - Knowledge of risk management practices and cybersecurity regulatory requirements like DORA and cybersecurity regulatory requirements in Asia Pacific - Solid communication and interpersonal skills to collaborate with stakeholders at all levels - Well-organized, detail-oriented, and a good team player, capable of establishing effective working relationships - Ability to work independently with strong self-motivation Additional Details: - At least 10 years of experience in IT management/cybersecurity governance or related field - Previous exposure in a financial institution is preferred Educational Qualification: - A bachelors degree in information technology, computer science, or a related field is required - One of the following certifications is mandatory: - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) - Certified Information Systems Auditor (CISA)