APAC Regional Cybersecurity Lead

Danone; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Danone seeks an IT & Data Regional Cybersecurity Manager APAC based in Malaysia to deliver cybersecurity programs, capabilities and change management across the region. The role requires driving transformation, managing regional risk, and aligning regional priorities with global cybersecurity strategies.

Responsibilities include stakeholder engagement, incident response leadership, policy implementation and regional risk assessments, with a focus on protecting crown jewel data and critical

Qualifications

• A recognized degree or Master or professional qualification in Information Technology or Cyber Security.
• At least 7 years of experience in technology and cybersecurity risk or related domain.
• Ability to apply risk and control frameworks.
• Experience in conducting and managing penetration testing and vulnerability management.
• Recognized information security certifications (e.g., CISSP, CISM, CISA) are a plus.
• Must be able to connect and collaborate effectively with key stakeholders within the organization.

Responsibilities

• Be the key cyber contact for the region and manage relationships with business, IT & DATA and Product Owners.
• Drive cyber capability uplift for the region and define regional KPIs aligned with global ones.
• Implement cyber policy in the region and evaluate policy exceptions.
• Run local cybersecurity risk assessments for critical projects and provide recommendations.
• Act as incident response manager for the region and lead responses to local incidents affecting critical assets.

Skills

Cyber risk management

Incident response

Penetration testing

Vulnerability management

Stakeholder management

Policy compliance

Security certifications

Education

Info Tech/Cyber security degree

Master's or professional qualification

Tools

CISSP

CISM

CISA

Job description

Danone seeks an IT & Data Regional Cybersecurity Manager APAC based in Malaysia to deliver cybersecurity programs, capabilities and change management across the region. The role requires driving transformation, managing regional risk, and aligning regional priorities with global cybersecurity strategies.

Responsibilities include stakeholder engagement, incident response leadership, policy implementation and regional risk assessments, with a focus on protecting crown jewel data and critical