Hub Cybersecurity Lead

1. Job Purpose

The APAC TSO Hub Cybersecurity Lead manages cybersecurity risks, implements global security standards, and protects systems, data and technology operations across the APAC region. The role leads and develops the regional cybersecurity team and works with business and technology leaders and the Global Information Security team to apply security requirements in line with local regulations and business needs. The role also coordinates cybersecurity incident response and serves as a key security contact for businesses across APAC.

2. Key Responsibilities

Team Leadership

• Lead, coach and develop the APAC cybersecurity team.

• Coordinate security activities across regional technology teams and businesses.

Security Standards and Compliance

• Implement cybersecurity policies and standards across APAC.

• Ensure compliance with relevant local regulations and company requirements.

• Work with Global Information Security teams to address regional security needs.

• Ensure global security key indicator thresholds are met.

Risk Management and Security Controls

• Assess cybersecurity risks for new systems, projects and technology changes.

• Review and approve regional security requests and identify non-compliant solutions.

• Monitor security controls, support audits and ensure that identified issues are resolved on time.

• Develop and track action plans to reduce security risks.

• Identify regional opportunities to improve the cybersecurity agenda

Cybersecurity Incident Management

• Act as the central contact between global teams responsible for cybersecurity incident coordination and management and Operating Companies.

• Coordinate the remediation of identified security vulnerabilities. Global Information Security owns vulnerability identification and prioritisation; local asset owners are responsible for remediation.

• Support security investigations when required.

Technology and Operational Security

• Provide security guidance, based on global security policies, for IT systems, networks and industrial control systems used in production.

• Support effective security practices, including system updates, vulnerability management and access controls.

• Work with technology teams to integrate security requirements into new and existing solutions.

Security Awareness

• Support the delivery of global cybersecurity awareness training tailored to APAC business needs and drive completion.

• Promote good security practices across regional teams.

Planning and Reporting

• Develop regional cybersecurity improvement plans and coordinate required resources and budgets.

• Report key security risks, incidents, compliance gaps and improvement progress to regional management and Global Information Security teams.

3. Leadership Expectations

Deliver — Essential: Play to win, celebrate success and deliver results.

Shape — Crucial: Think consumers first and make courageous moves.

Connect — Essential: Champion a culture of belonging; learn, share and reapply.

Develop — Applicable: Have real conversations and embrace learning and growth. Lead, provide feedback to and hold project managers and consultants accountable.

4. Communication and Other Skills

Communication Skills

• Manage relationships with stakeholders who have conflicting interests; communicate effectively, both verbally and in writing.

• Act as the operational link between business stakeholders, including senior leaders, and technical roles in Global Information Security.

Other Skills

• Understand the business and the importance of creating value for customers.

• Work collaboratively and navigate complex decision-making.

• Demonstrate experience working in an Agile environment.

Education - Bachelor's or Master's degree, preferably in computer science, software engineering, network design or a related field.

Required Experience

• 10+ years of experience in PMO and IT.

• Minimum 8 years of experience in cybersecurity.

• More than 5 years of experience in cybersecurity or IT audit, with previous experience as a Cybersecurity Officer or Manager.

• Extensive understanding of the D&T organisation.

6. Functional Competencies

• Business analysis: interpret customer needs and convert them into initiatives.

• Project management, strategic planning and resource management.

• Relevant professional qualifications, such as CISSP, CISM, ISSMP, CISA, CIA, CSTA, CSTP, CIIP, CFIP, CSIS, CMI or CWSA, or equivalent.

• Identify and drive opportunities to improve information security efficiency.

• Knowledge of and practical experience with frameworks and standards such as NIST, ISO 27000 series and IEC 62443.

• Experience with business impact assessments and security assessments.

• Act as a cybersecurity ambassador by communicating information security and risk requirements to product teams and global functions.

• Explain cybersecurity governance and processes to business stakeholders.

• Recognise problems, identify possible causes and resolve issues.

• Work effectively with people from different teams and cultures.

• Adapt to multiple demands, changing priorities, ambiguity and rapid change.

• Apply strong analytical and reporting skills.

• Write reports, procedures and policies, and communicate effectively in different situations.

• Establish and maintain effective working relationships with internal and external organisations, teams and individuals.