Regional Information Security Officer, APAC

About the role

The Regional Information Security Officer, APAC oversees the cybersecurity strategy and risk management for a global insurer's General Insurance operations across Asia Pacific. Reporting to the APAC RISO, the role manages a team of five information security managers and acts as a trusted advisor to regional executives including CIOs, COOs and CROs. It covers programme governance, incident response, assurance activities and security governance reporting.

Key responsibilities

• Govern and assure the deployment of the Cybersecurity Programme across the APAC General Insurance portfolio
• Monitor the implementation of CISO risk priorities with IT delivery teams and regional leadership
• Collaborate with the global Security Operations Center, privacy and executive teams during security incidents
• Assess and evaluate cyber risks and controls in the APAC markets
• Manage security assurance over IT projects, including reviews, penetration tests and vulnerability assessments
• Report on cybersecurity metrics, escalate risks and lead security governance forums
• Drive security awareness and culture initiatives and provide security expertise for transformation, M&A and technology integration projects
• Lead the regional security team and foster a high-performance, continuously improving culture

Required profile

• 15+ years of broad-based information security experience
• Demonstrable experience leading security teams across multiple markets
• Experience presenting cyber risk to executive leadership and boards
• Experience implementing security programmes across geographic portfolios
• Experience with Asia region-specific regulatory compliance requirements
• Strong interpersonal skills and ability to work independently in a matrix environment

Required skills

• Knowledge of ISO 27000, NIST SP 800 / CSF and ISF SoGP
• Threat and vulnerability management, application security and infrastructure security
• Ability to work in fast-paced, agile environments