Director – Global Cybersecurity

Responsibilities:

• Define and implement the global–regional cybersecurity operating model, including decision rights, responsibilities, escalation thresholds and functional coordination across regions and countries.
• Develop the Group’s target security architecture and implementation roadmap covering network segmentation, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management.
• Establish and enforce consistent global security-control baselines across critical systems, operating entities and privileged-access environments, with formal exception and risk-acceptance processes.
• Provide technical security oversight for new platforms, system integrations, cloud migrations and digital initiatives, ensuring security requirements are incorporated throughout the technology-delivery lifecycle.
• Lead the Group’s vulnerability and exposure-management programme, including asset discovery, vulnerability scanning, risk-based prioritisation, patching standards and external attack-surface reduction.
• Oversee threat detection and security operations, including SIEM and EDR engineering, detection-rule development, alert triage, threat hunting, threat intelligence and the performance of the managed Security Operations Centre.
• Establish and lead a wide Cybersecurity Incident Response Team with a common playbook, command structure, severity classification, escalation process and follow-the-sun response capability.
• Serve as Incident Commander for material cybersecurity incidents, coordinating containment, recovery, forensic investigation, executive decision-making and regulatory, customer and stakeholder communications.
• Strengthen cyber resilience by establishing immutable and segregated backup standards, testing recovery times for critical platforms and developing manual operational fallbacks for major system outages.
• Develop and implement security controls for operational technology and logistics systems, including warehouse systems, automation equipment, robotics, transport platforms, fleet devices, facility systems and customer or carrier EDI/API integrations.
• Lead identity, cloud and data-security initiatives, including consolidated identity management, phishing-resistant multifactor authentication, privileged-access management, cloud-security posture, encryption, key management, data-loss prevention and secure AI adoption.
• Establish and maintain Group cybersecurity policies and control standards aligned with recognised frameworks such as ISO 27001, NIST Cybersecurity Framework or equivalent, while overseeing security awareness and phishing-resilience programmes.
• Translate global regulatory and cross-border data requirements—including mainland China cybersecurity and data laws, GDPR, Singapore’s Cybersecurity Act and PDPA, and Hong Kong’s PDPO—into practical technical and operational controls.

Requirements:

• Minimum 12 years of cybersecurity experience, including at least five years leading technical security teams across multiple countries or regions.

• Strong hands-on technical knowledge of security architecture, network security, cloud security, identity and access management, endpoint protection, vulnerability management, SIEM, EDR and security engineering.

• Demonstrated experience building or transforming cybersecurity capabilities within a geographically distributed organisation with varying levels of security maturity.

• Proven experience leading major cybersecurity incidents from detection and containment through recovery, executive communication, regulatory notification and post-incident remediation.

• Experience establishing or operating a distributed Cybersecurity Incident Response Team and coordinating internal responders, external forensic specialists, legal advisers and managed-security providers.

• Proven ability to lead cybersecurity professionals through a matrix structure, influence regional and country teams without direct authority, and establish common standards across diverse markets and cultures.

• Working knowledge of at least two major cybersecurity or data-protection regimes, preferably including mainland China’s cybersecurity and data laws, EU GDPR, Singapore’s Cybersecurity Act and PDPA, or Hong Kong’s PDPO.

• Experience securing operational technology, industrial systems or environments where system availability is critical and conventional patching or endpoint controls may not be practical.

• Strong executive presence, communication and stakeholder-management skills, with the ability to explain complex cyber risks and investment decisions clearly to senior management, regulators, customers and Board committees.

• Experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is strongly preferred; relevant certifications such as CISSP, CISM, CCISO, GIAC, OSCP or cloud-security certifications, would be advantageous.

Skills

Managed Security Services, Security Architecture, Board Governance, Endpoint Management, Security Requirements, Escalation Management, Data Protection Legislation, Attack Surface Management, Incident Management Services, Security Management, Forensic Investigation, Cyber Incident Management, Threat Intelligence, User Access Administration, Supervise Teams, Security Incident Response