Business Information Security Officer (BISO)

dentsu; Kuala Lumpur; On-site; MYR 300,000 - 600,000; Full time

Job summary

Dentsu is seeking a senior information security leader to partner with global and regional teams to define and deliver a regional security engagement strategy across APAC. You will build strong stakeholder relationships and champion security as a business enabler.

Responsibilities include delivering the Global Business Security programme in APAC, overseeing third‑party audits, coordinating incident response and root-cause analysis, and staying ahead of regional regulatory changes while fostering

Qualifications

• Broad cyber/information security leadership expertise.
• Experience in engaging with senior stakeholders and driving change.
• Strong governance, risk management and policy implementation skills.
• Proven incident management and root-cause analysis capabilities.

Responsibilities

• Define regional security engagement strategy with global CISO and regional leaders.
• Embed security culture and controls with regional CTO and other IT executives.
• Partner with BISOs, Product Leads and Global Security Leadership to implement a business security program.
• Oversee third-party information security audit programmes and remediation of findings.
• Lead incident response planning, training, and post-incident root-cause analysis.
• Maintain awareness of regional regulations and propose updates to policies and standards.
• Provide leadership, direction and development for the regional security team.

Skills

Security leadership

Stakeholder management

Governance & risk

Incident management

Strategic thinking

Job description

Led by Dentsu Group Inc. (Tokyo: 4324; ISIN: JP3551520004), a pure holding company established on January 1, 2020, the Dentsu Group encompasses two operational networks: dentsu japan network, which oversees Dentsu’s agency operations in Japan, and dentsu international, its international business headquarters in London, which oversees Dentsu’s agency operations outside of Japan.

With a strong presence in approximately 145 countries and regions across five continents and with 65,000 dedicated professionals, the Dentsu Group provides a comprehensive range of client-centric integrated communications, media and digital services through its five leadership brands—Carat, dentsu X, iProspect, Dentsu Creative, and Merkle as well as through Dentsu Japan Network companies, including Dentsu Inc., the world’s largest single brand agency with a history of innovation. The Group is also active in the production and marketing of sports and entertainment content on a global scale.

Key Responsibilities

• Partner with global CISO to define and articulate a regional security engagement strategy.
• Partner with regional CTO to embed security culture and controls.
• Partners with relevant IT executive member to embed security culture and controls.
• Partners with other Regional BISOs, Product Leads and Global Security Leadership, to define and implement a business security engagement strategy
• Build and maintain strong stakeholder relationships, evangelise security and find opportunities for security to add value within the business.
• Delivers the Global Business Security programme to The APAC region.
• Understands the security posture and business processes of APAC regional teams including to effectively engage them in the Security Programme and manage their risks.
• Operates security governance structure and feed into security committees.
• Oversees third party information security audit programmes to include remediation of findings
• Serves as the initial security advisor on projects and ensure stakeholders receive the global security services. Engage domain expertise from global teams as needed.
• Oversees engagement and training of business incident response teams. Co-ordinates business response teams during an incident, and drive "root cause” analysis for major incidents to identify and remediate information security issues
• Maintains awareness of relevant regional regulations and propose updates to global policies, standards and procedures in support of regulatory compliance.
• Champion a strong team culture that centres on the behaviours, promoting collaboration, innovation, and continuous improvement.
• Provide leadership and direction for the team, including objective setting, performance review and personal development.

Professional skills

• Broad and deep Cyber/Information Security expertise sufficient to engage with, and provide value add service, to a range of stakeholders.
• Team player. Experience of breaking down silos and creating shared visions.
• Excellent stakeholder engagement and ability to drive change in a matrixed organisation.
• Expert problem solver. Ability to analyse problems from multiple perspectives to drive win:win solutions for all stakeholders.
• Experience in managing senior stakeholders and able to adapt approach/style to different individuals and teams.