Head of Cybersecurity, APAC, VP/SVP

Key Responsibilities:

• Cybersecurity Strategy and Governance - Formulate and execute a holistic cybersecurity strategy for the APAC region that aligns with overarching global objectives and specific business requirements.
• Establish and uphold governance frameworks, policies, and procedures to effectively manage cybersecurity risks.
• Conduct cybersecurity maturity assessments and spearhead enhancements across various countries.
• Serve as the main advisor to regional leadership on matters related to cybersecurity risks, trends, and effective practices.
• Security Operations and Incident Response - Supervise regional security operations, focusing on threat detection, incident response, and vulnerability management.
• Direct the creation and evaluation of incident response plans and disaster recovery strategies.
• Collaborate with global security teams to strengthen SOC (Security Operations Center) capabilities and threat intelligence sharing.
• Lead post-incident analyses and implement improvements based on insights gained.
• Risk Management and Compliance - Perform regular risk assessments to identify, prioritize, and mitigate cybersecurity risks within the region.
• Work in partnership with compliance and legal teams to ensure alignment with cybersecurity regulations and industry best practices.
• Engage with the Internal Audit team to assist with IT and cybersecurity audit activities and facilitate remediation efforts.
• Oversee assessments of third-party vendors, ensuring compliance with security standards and practices.
• Security Awareness and Training - Design and implement cybersecurity awareness initiatives to educate staff on safe digital practices and threat mitigation.
• Ensure continuous compliance with mandatory cybersecurity training across the region and support ongoing awareness programs.
• Technology and Project Management - Lead and oversee regional cybersecurity projects encompassing network security, data protection, identity and access management, and cloud security initiatives.
• Guarantee the deployment, integration, and continuous enhancement of security technologies within regional systems.
• Collaborate with IT teams to align cybersecurity strategies with business needs and operational objectives.
• Collaboration and Leadership - Build and guide a high-performing regional cybersecurity team through effective recruitment, mentorship, and professional development.
• Encourage collaboration between regional and global cybersecurity teams to achieve organizational objectives.
• Act as the primary cybersecurity liaison for external auditors, regulators, and other relevant stakeholders as necessary.

Qualifications:

• Education: A Bachelor's degree in Computer Science, Information Security, or a related discipline is required; a Master's degree is preferred.
• Certifications: CISSP, CISM, CISA, or other equivalent cybersecurity certifications are essential.
• Experience: A minimum of 10-15 years of experience in the cybersecurity field, with at least 5 years in a leadership capacity, preferably within the insurance or financial services sectors.
• Technical Skills: Expertise in threat management, vulnerability assessment, security incident response, and familiarity with security frameworks (e.g., NIST, ISO 27001).
• Regulatory Knowledge: Comprehensive understanding of regulatory requirements affecting cybersecurity in the financial sector, such as MAS TRM, PDPA, BNM RMiT, HKMA, and APRA.
• Soft Skills: Exceptional communication, leadership, and stakeholder management abilities, with a demonstrated history of influencing cross-functional teams.