Regional Information Security Manager APAC

Asendia; Hong Kong; Sur place; HKD 900 000 - 1 300 000; Plein temps

Résumé du poste

Asendia APAC seeks a Regional Information Security Manager APAC to join our Risk, Compliance & Security team. You will lead hands-on deployment of security tools, manage day-to-day operations, and ensure Group security policies are applied across APAC, with close coordination to local entities in Hong Kong or Singapore.

Based in Hong Kong or Singapore, you will work with the CISO and regional stakeholders to advance security controls, oversee incident response, and drive awareness programs to

Qualifications

• Bachelor’s degree in information technology, Computer Science, Cybersecurity or equivalent with 5+ years’ experience.
• CISSP certification preferred; ISC2 CC or equivalent cybersecurity certification accepted.

Responsabilités

• Lead regional information security implementation and align with APAC sites.
• Oversee security operations, SOC coordination and triage.
• Support audits, regulatory reporting, and policy enforcement in APAC.
• Coordinate incident management and regional cyber crisis response.
• Run regional security awareness campaigns and training.

Connaissances

Cybersecurity implementation

Security analysis

Threat intelligence

Project leadership

Stakeholder coordination

APAC regulatory knowledge

Formation

Bachelor’s degree in IT / Cybersecurity

CISSP certification preferred

ISC2 CC or equivalent cybersecurity certification

Outils

EDR

XDR/SIEM

Backup tools

Description du poste

Asendia empowers businesses to grow across borders with a range of international e-commerce and mail delivery services. Launched in 2012 by La Poste and Swiss Post, Asendia has the combined expertise of over 1500 employees across 4 continents. With operations across the world, we bring together a wealth of international and local expertise, and a network that delivers to over 200 countries and territories. Asendia’s heritage as a mail business is unrivalled, but today we are also at the forefront in providing e-commerce parcel solutions for e-tailers selling internationally. We provide a number of value-added services too, including returns, fulfilment and lettersshops, and we have acquired a number of companies to enhance our services, including eShopWorld a global e-commerce software business.

Asendia is committed to providing equal opportunities. In accordance with the applicable local laws, regulations, and ordinances, all qualified applicants will receive fair consideration for employment without regard to age, race, gender, religion, national origin, ethnicity, sexual orientation, marital status and family responsibilities, disability, or any other protected characteristics.

Regional Information Security Manager APAC

Role Purpose

We are seeking a Regional Information Security Manager APAC to join our APAC Risk, Compliance & Security team. Reporting to the Regional Risk and Compliance Officer, you will predominantly be responsible for the hands-on implementation and day-to-day operation of the Group Information Security strategy on your perimeter, in strong coordination with the local entities and APAC IT team, and functionally report to the Group Chief Information Security Officer (CISO).

This is an operational role: you will personally lead the roll-out and ongoing management of security tools and processes, own first-level alert analysis, evaluation, and triage, and drive the day-to-day coordination of local security incident mitigation – not merely oversee these activities from a policy or risk standpoint. You will also ensure controlling policies are understood and applied in the region, drive security awareness locally in line with the Group and with the shareholders, and participate in Group security committees to feed region specificities. You will serve as the regional guardian of Group security policies, combining strong technical, hands-on security operations with governance responsibilities, to ensure adherence to Group standards and security requirements. You will also lead or contribute to transversal projects and ensure controlling policies are understood and applied in the region, drive security awareness locally in line with the Group and with the shareholders, and participate in Group security committees to feed region specificities. This position shall be based in either Hong Kong or Singapore.

Your Tasks

A. Stakeholder Engagement & Governance

• Drive and execute on regional security implementation alignment across APAC sites.
• Work closely and proactively with stakeholders in local subsidiaries and the regional office to identify potential security issues and provide pragmatic solutions and recommendations.
• Act as the focal point of contact in APAC to provide practical guidance regularly on the application of Group security policies to safeguard Asendia's assets.
• Analyze and report on regional security scope contribution via dashboard visualization to the CISO.
• Participate in monthly Group CISO meetings.

B. Security Operations & Service Management

• Coordinate and follow up on recurrent security activities (e.g. backup tests, monthly patching, Active Directory review and clean-up) across APAC.
• Oversee security solutions/tools (EDR, Email protection, XDR/SIEM, Vulnerability scan, etc.) service management and first level escalation.
• Manage daily security operational activities, initial diagnosis/triage, and SOC managed services coordination.
• Coordinate and follow up on security project build and deployment action plans.

C. Compliance, Audit & Regulatory Alignment

• Control the implementation of Group security policies and procedures.
• Support policy compliance and internal and external audits.
• Coordinate any audits, certifications, and regulatory reporting that may be required for APAC operations.
• Work with Business stakeholders to collect and review local information security requirements, regulations, and other necessary information to assist local subsidiaries in complying with them.

D. Incident & Crisis Management

• Coordinate security incident management and possible regional cyber crisis management, acting as the main point of contact for security incidents within APAC.

E. Security Awareness & Culture

• Conduct regional awareness campaign coordination (phishing campaigns, develop and deliver regular security messages and training to strengthen the overall security culture, coordination with other involved stakeholders).

Your Profile

• Bachelor’s degree in information technology, Computer Science, Cybersecurity with at least 5 years of experience, or equivalent technical or security qualifications and experience learned on the field.
• Strong understanding of cybersecurity technical implementation and Information System security analysis skills. CISSP certification preferred. Minimum requirement: ISC2 CC or other recognized cybersecurity certification.
• Good understanding of current cybersecurity threat intelligence, trends, and market solutions.
• Experience in leading projects to oversee potential Cybersecurity workstream management.
• Strong coordination skills to facilitate communication between stakeholders, ensuring Group policies are understood and applied, and managing implementation or exception follow-up.
• Good working knowledge of APAC's regulatory landscape (e.g. data protection and privacy requirements).

Asendia APAC Core Competencies

• Ability to execute on strategic plans and provide improvement measures to management, and ensures the work adds value by contributing to the growth of the business.
• Skilled in tailoring message to the audience with audience targeted presentation skills and confidently delivering consistent and clear messaging to diverse audience, with good documentation.
• Ability to translate ambiguity to action and implement change management methodologies.

Our Facts

Our mission is to excel in every interaction with our customers. Our values are deliver for our customers, strive for excellence, collaborate as one team and our commitment to sustainability.

Driving success, communicating information, and adjusting to change are essential competencies that drive our strategy in APAC.

Employees wellbeing and corporate social responsibility are at the heart of our core values. We wish to instil a strong culture of corporate social responsibility within every employee and hope to create a positive and productive environment where employees can thrive.

All personal data collected will be used for recruitment related purposes and treated in strictest confidentiality. Only shortlisted candidates will be informed. All personal data supplied will be destroyed after completion of the recruitment process.