Cybersecurity & BCM Specialist (APAC)

Job Description:

• Partner with regional business teams across APAC to design, test, and continuously improve end-to-end business continuity plans that safeguard operational stability during disruptions
• Serve as a trusted advisor and sparring partner to the business by aligning IT Security and Business Continuity Management (BCM) activities with organizational goals and stakeholder expectations
• Create and execute strategies to strengthen the resilience of IT systems, including support for disaster recovery planning and implementation
• Continuously monitor and protect computer networks by identifying vulnerabilities and investigating security breaches and other cybersecurity incidents using the latest security tools
• Work with global IT and security teams to support penetration testing, network vulnerability detection, and the auditing of systems applications and access rights
• Deliver thorough support to business units, projects, and customers on security-related topics by providing clear guidance aligned with security best practices
• Lead the development and regional (APAC) delivery of security awareness initiatives and training programs to build a sustainable security culture across the organization

Key Responsibilities:

• Minimum 3 years of experience in information security, including demonstrated expertise in both IT and OT security environments
• Experience managing an ISO 27001 Information Security Management System (ISMS) is essential
• Strong experience auditing and ensuring compliance with information security and OT security standards, including the management of complex regulatory requirements
• In-depth knowledge of the latest ISO 27001 standards, NIS2 regulations, and cybersecurity legislation applicable to both IT and OT environments, particularly in European and German contexts
• Proven capability to produce clear, effective written deliverables such as policies, standards, and compliance reports for IT and OT environments
• Relevant certifications e
• g
• ISO 27001 Lead Auditor GICSP CISM CISA CRISC or similar, or willingness to obtain them
• Excellent communication skills in English (written and spoken); proficiency in German is an advantage
• A structured, self-reliant, and analytical working approach combined with strong collaboration and stakeholder management skills
• A professional, solution-oriented, and customer-focused mindset is critical

Technical Requirements:

Preferred Skills:

Domain->Information Security->Information Security Compliance,Domain->GRC->ISO 22301 Implementation,Foundational->Quality models/improvement frameworks->ISO 27001