Business Information Security Officer (BISO)

dentsu; Kuala Lumpur; On-site; MYR 150,000 - 190,000; Full time

Job summary

Dentsu is seeking a regional security leader to partner with the global CISO and regional CTO to define and govern a security engagement program across APAC. The role emphasizes building strong stakeholder relationships, aligning security with business needs, and driving value through security initiatives.

You will oversee governance, third-party audits, incident response coordination, and regulatory awareness across the APAC region, supporting continuous improvement and cross‑functional

Qualifications

• Broad and deep cyber/information security expertise.
• Experience engaging with senior stakeholders in a matrix organisation.
• Excellent stakeholder engagement and ability to drive change.
• Expert problem solving across multiple perspectives.

Responsibilities

• Partner with global CISO to define and articulate a regional security engagement strategy.
• Partner with regional CTO to embed security culture and controls.
• Oversee security governance and engage global security leadership as needed.
• Oversee third party information security audit programmes and remediation.
• Coordinate incident response training and drive root-cause analysis for major incidents.
• Ensure awareness of regional regulations and advise updates to policies and standards.

Skills

Cyber/Info security expertise

Stakeholder management

Change management

Leadership & team development

Security governance

Job description

Led by Dentsu Group Inc. (Tokyo: 4324; ISIN: JP3551520004), a pure holding company established on January 1, 2020, the Dentsu Group encompasses two operational networks: dentsu japan network, which oversees Dentsu’s agency operations in Japan, and dentsu international, its international business headquarters in London, which oversees Dentsu’s agency operations outside of Japan.

With a strong presence in approximately 145 countries and regions across five continents and with 65,000 dedicated professionals, the Dentsu Group provides a comprehensive range of client-centric integrated communications, media and digital services through its five leadership brands—Carat, dentsu X, iProspect, Dentsu Creative, and Merkle—as well as through Dentsu Japan Network companies, including Dentsu Inc., the world’s largest single brand agency with a history of innovation. The Group is also active in the production and marketing of sports and entertainment content on a global scale.

Key Responsibilities

• Partner with global CISO to define and articulate a regional security engagement strategy.
• Partner with regional CTO to embed security culture and controls.
• Partners with relevant IT executive member to embed security culture and controls.
• Partners with other Regional BISOs, Product Leads and Global Security Leadership, to define and implement a business security engagement strategy
• Build and maintain strong stakeholder relationships, evangelise security and find opportunities for security to add value within the business.
• Delivers the Global Business Security programme to The APAC region.
• Understands the security posture and business processes of APAC regional teams including to effectively engage them in the Security Programme and manage their risks.
• Operates security governance structure and feed into security committees.
• Oversees third party information security audit programmes to include remediation of findings
• Serves as the initial security advisor on projects and ensure stakeholders receive the global security services. Engage domain expertise from global teams as needed.
• Oversees engagement and training of business incident response teams. Co-ordinates business response teams during an incident, and drive "root cause” analysis for major incidents to identify and remediate information security issues
• Maintains awareness of relevant regional regulations and propose updates to global policies, standards and procedures in support of regulatory compliance.
• Champion a strong team culture that centres on the behaviours, promoting collaboration, innovation, and continuous improvement.
• Provide leadership and direction for the team, including objective setting, performance review and personal development.

Professional skills

• Broad and deep Cyber/Information Security expertise sufficient to engage with, and provide value add service, to a range of stakeholders.
• Team player. Experience of breaking down silos and creating shared visions.
• Excellent stakeholder engagement and ability to drive change in a matrixed organisation.
• Expert problem solver. Ability to analyse problems from multiple perspectives to drive win:win solutions for all stakeholders.
• Experience in managing senior stakeholders and able to adapt approach/style to different individuals and teams.

Keeping connected

Please visit our website to find out more and connect with us on social.