Manager, Information & Cyber Security Asia Pacific

Goal of Position

The incumbent is to assist the Chief Compliance Officer Asia Pacific and the global Information & Cyber Security (ICS) organization in the implementation, maintenance, and improvement of an Information Security Management System (ISMS). He/she will assist the organization and its employees in adhering to all internal policies, procedures and practices as well as applicable external laws and regulations relating to ICS.

Your Key Responsibilities

• Act as first point of contact for all ICS-related matters in the region.
• Manage the rollout and keep track of the ISMS in the region, and prepare regular and ad hoc reports for the regional Executive Board and HQ.
• Plan and perform ICS risk management tasks (incl. data privacy in close alignment with the CCO AP and the group Data Privacy Office (DPO)) together with colleagues in the region and HQ.
• Prepare ICS-related assessments (internal and external), reviews, certifications, and re-certifications in the region, incl. ISO 27001 and/or TISAX, if necessary, and follow up on and document the implementation of required and recommended measures.
• Take part in the IT demand management process by reviewing information classifications and defining technical and organizational measures.
• Manage the records of processing activities for the legal entities in the region in close alignment with the CCO AP and the DPO, incl. privacy impact assessments.
• Prepare responses to ICS-related audit and assessment queries from customers in consultation with relevant colleagues in the region and HQ.
• Conduct communication and awareness measures, incl. trainings, within the region.
• Implement group policies and procedures in the region and adapt them to regional, national, and local specifications.
• Monitor and document regulatory developments in cyber security in the region, incl. legal and customer requirements.

Your Qualifications

• Possesses Bachelor's degree or recognized equivalent from an accredited institution. 
• Possesses knowledge of ISO 27001 and/or TISAX. Having relevant certifications (CISSP, CISM, ISO 27001 Implementer/Lead Auditor or equivalent qualifications) are preferred.
• Minimum 5 years of relevant experience in a similarly sized business with international exposure. 
• Possesses solid information security experience, incl. good knowledge of related procedures.
• Familiar with data privacy.
• Experience in the performance of risk and control assessments, security concepts and security reviews.
• Possesses excellent interpersonal, communication and negotiation skills
• Good knowledge of Microsoft Office suite (Word, Excel, PowerPoint).
• Willing to travel within the region.