Regional Cybersecurity Leader & Acting DPO

Bluebell Group; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

Bluebell Group is seeking a regional cybersecurity leader to drive our security strategy and serve as the Group's DPO, reporting to the Head of Cyber Security & IT Infrastructure. This hands-on role advances Zero Trust across Asian markets and requires deep technical execution and policy development.

The role oversees Microsoft security tooling, external SOC operations, vulnerability management, and governance, risk, and compliance programs while functioning as an individual contributor.

Qualifications

• 5-8 years of dedicated experience in cybersecurity operations, incident response, and IT governance.
• Hands-on experience with modern cloud security architectures, especially Microsoft Security stack and EDR/XDR.
• Strong regulatory knowledge in Asian data privacy laws; China and Korea experience prioritized.
• Industry security certifications (CISSP, CISM, CISA) required; privacy certs a plus.
• Fluent business English; Mandarin/Korean/Japanese advantageous for compliance.

Responsibilities

• Oversee deployment and optimization of the Microsoft security stack (identity, endpoint protection, DLP).
• Manage external 24x7 SOC, ensuring SLA adherence, rapid incident triage, and threat hunting.
• Conduct vulnerability assessments, coordinate penetration testing, and patch management across regional infrastructure.
• Act as incident responder for internal escalations and remediation.
• Serve as DPO for data privacy and compliance across Asian markets.
• Lead data retention policy implementation and automated DLP enforcement.
• Interface with regulatory bodies and manage breach notification protocols.
• Develop IT security policies, SOPs, and incident response playbooks.
• Design security awareness training for staff and retail employees.

Skills

Cybersecurity operations

Incident response

IT governance

Stakeholder management

Communication

Crisis management

Teamwork

Tools

Microsoft Security stack (Purview Defender Entra ID)

EDR/XDR platforms

Job description

Bluebell Group is seeking a regional cybersecurity leader to drive our security strategy and serve as the Group's DPO, reporting to the Head of Cyber Security & IT Infrastructure. This hands-on role advances Zero Trust across Asian markets and requires deep technical execution and policy development.

The role oversees Microsoft security tooling, external SOC operations, vulnerability management, and governance, risk, and compliance programs while functioning as an individual contributor.