Regional Cybersecurity Manager & Acting DPO

Bluebell Group; Hong Kong; Presencial; HKD 600.000 - 1.000.000; Jornada completa

Descripción de la vacante

Bluebell Group is seeking a regional cybersecurity leader to drive our security strategy and serve as the Group's DPO, reporting to the Head of Cyber Security & IT Infrastructure. This hands-on role advances Zero Trust across Asian markets and requires deep technical execution and policy development.

The role oversees Microsoft security tooling, external SOC operations, vulnerability management, and governance, risk, and compliance programs while functioning as an individual contributor.

Formación

• 5-8 years of dedicated experience in cybersecurity operations, incident response, and IT governance.
• Hands-on experience with modern cloud security architectures, especially Microsoft Security stack and EDR/XDR.
• Strong regulatory knowledge in Asian data privacy laws; China and Korea experience prioritized.
• Industry security certifications (CISSP, CISM, CISA) required; privacy certs a plus.
• Fluent business English; Mandarin/Korean/Japanese advantageous for compliance.

Responsabilidades

• Oversee deployment and optimization of the Microsoft security stack (identity, endpoint protection, DLP).
• Manage external 24x7 SOC, ensuring SLA adherence, rapid incident triage, and threat hunting.
• Conduct vulnerability assessments, coordinate penetration testing, and patch management across regional infrastructure.
• Act as incident responder for internal escalations and remediation.
• Serve as DPO for data privacy and compliance across Asian markets.
• Lead data retention policy implementation and automated DLP enforcement.
• Interface with regulatory bodies and manage breach notification protocols.
• Develop IT security policies, SOPs, and incident response playbooks.
• Design security awareness training for staff and retail employees.

Conocimientos

Cybersecurity operations

Incident response

IT governance

Stakeholder management

Communication

Crisis management

Teamwork

Herramientas

Microsoft Security stack (Purview Defender Entra ID)

EDR/XDR platforms

Descripción del empleo

Role Overview

Bluebell Group is seeking a highly skilled and resilient Regional Cybersecurity Manager to lead our information security strategy and act as the Group’s Data Protection Officer (DPO). Reporting directly to the Head of Cyber Security & IT Infrastructure, this dual-hatted role is critical to safeguarding our digital ecosystem across all our Asian markets.

The successful candidate will drive our transition into modern, Zero Trust architecture leveraging the Microsoft Security ecosystem, manage our external Security Operations Center (SOC), and ensure rigorous compliance with regional data privacy regulations.

Please note: This is a highly hands-on, individual contributor position. You will be the primary driver of both high-level strategy and ground-level technical execution, operating without a dedicated subordinate headcount. We are looking for a practitioner who is just as comfortable writing compliance policies as they are configuring firewall rules and investigating endpoint alerts.

Key Responsibilities

Hands-on Cybersecurity Operations:

• Directly oversee the deployment, administration, and optimization of our Microsoft security stack, including identity management, endpoint protection (XDR), device management, and data loss prevention (DLP) tools.
• Act as the primary technical liaison managing our external 24x7 Security Operations Center (SOC), ensuring SLA adherence, rapid incident triage, and effective threat hunting.
• Personally conduct regular vulnerability assessments, coordinate penetration testing, and execute patch management processes across the regional infrastructure.
• Serve as the primary incident responder for internal escalations, actively investigating and remediating potential security breaches.

Acting Data Protection Officer (DPO) & Compliance:

• Serve as the Group's subject matter expert on data privacy and cybersecurity regulations across all Asian markets where Bluebell operates.
• Crucial Focus: Maintain a deep, actionable understanding of the stringent data security, cross-border transfer, and privacy regulations specific to all Bluebell markets.
• Lead the creation, implementation, and automated enforcement (via DLP tools) of the Group Data Retention Policy across customer and employee HR data.
• Act as the primary point of contact for regional data privacy regulatory bodies and manage statutory breach notification protocols if required.

Governance, Risk & Compliance (GRC):

• Develop, maintain, and actively enforce comprehensive IT security policies, standard operating procedures (SOPs), and incident response playbooks.
• Design and conduct security awareness training for corporate staff and retail employees across the region.

Qualifications & Requirements

• Experience: 5-8 years of dedicated experience in cybersecurity operations, incident response, and IT governance.
• Technical Proficiency: Deep, hands-on administrative experience with modern cloud security architectures, specifically the Microsoft Security stack (Purview, Defender, Entra ID) and Endpoint Detection and Response (EDR/XDR) platforms.
• Regulatory Knowledge: Strong understanding of the broader Asian data privacy and cybersecurity regulatory landscape. Demonstrated, practical expertise navigating compliance and data protection laws in China and South Korea is highly prioritized.
• Certifications: Industry-recognized security certifications (e.g., CISSP, CISM, CISA) are required. Privacy certifications are a major plus.
• Execution Focus: Proven ability to operate effectively as a standalone individual contributor, demonstrating a "roll-up-your-sleeves" mentality to independently execute technical and administrative tasks.
• Languages: Fluent in business English (verbal and written) for regional collaboration. Fluency in Mandarin, Korean, or Japanese is highly advantageous for localized regulatory compliance.
• Stakeholder Management & Influencing
• Communication & Problem Solving
• Crisis Management & Resilience
• Collaboration & Teamwork

The Bluebell Spirit

We value individuals from all backgrounds who bring diverse perspectives, challenge thinking and contribute to shaping a stronger and more dynamic organisation.

Why Join Us

Joining Bluebell means stepping into a dynamic regional powerhouse with a family heart. Backed by a 70-year legacy across nine Asian markets, we offer a high-performance environment built on mutual respect and true autonomy, where your voice matters and your ideas shape retail in Asia.

About Bluebell Group

Bluebell Group is Asia’s leading brand operator and distributor, and a trusted partner to over 150 global premium brands. A family-owned pioneer with over 70 years of experience across nine markets, the Group delivers excellence in retail, distribution and brand building, powered by entrepreneurship and a commitment to high-performance. Discover more at bluebellgroup.com.