IT & Data Regional Cybersecurity Manager APAC - VAPT

UNAVAILABLE; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Danone Specialized Nutrition Business Services in Malaysia seeks an IT & Data Regional Cybersecurity Manager to lead regional cybersecurity programs, capabilities and change management, ensuring a secure environment across the region.

You will act as the key cyber contact for the region, drive risk-based security improvements, manage incident response, run regional trainings, and collaborate with global CISO teams to align regional priorities with policy and governance.

Qualifications

• A recognized degree or Master or professional qualification in IT or Cyber Security.
• 7+ years experience in technology and cybersecurity risk or related domain.
• Experience in conducting and managing penetration testing and vulnerability management.
• Certifications such as CISSP, CISM, CISA are a plus.
• Ability to connect and collaborate effectively with key stakeholders.

Responsibilities

• Lead regional cyber capability uplift aligned to global standards.
• Define regional KPIs and monitor security posture.
• Implement regional cyber policy and assess policy exceptions.
• Act as incident response manager for the region and respond to incidents.
• Coordinate with Zone Cyber Lead and CISO team for escalations.

Skills

Risk & control frameworks

Stakeholder collaboration

Penetration testing

Education

IT/Cyber Security degree or higher

Job description

Short Intro and About the Job

Danone Specialized Nutrition Business Services is seeking for IT & Data Regional Cybersecurity Manager, based in Malaysia. With our global presence, brands and business and our mission of bringing health through food to as many people as possible; we believe that people growth is a key asset to reach a sustainable business performance.To succeed in this journey, we're looking for the right talent and personalities eager to bring their energy and ideas to a meaningful project. Take this opportunity to GROW together and experience a culture that empowers you to express your ideas and share what you're passionate about! The role is responsible to deliver cybersecurity programs, capabilities and change management, in the region. A self-starter and able to drive transformation in an ambiguous environment. The role will require a sharp and fluid mind to adapt global priorities to regional strategy to enable a secure environment for Danone.Stakeholder Management

• Be the key cyber contact for the region and manage the relationships with the business, IT & DATA and Product Owners
• Articulate the value of cyber, understand cyber needs for the region (e.g. preventing and protecting crown jewel data and critical systems from cyber threats)
• Provide subject matter advice, guidance and counsel for key stakeholders and accountable for driving cybersecurity in the region

Capability & Change Management

• Drive cyber capability uplift for the region in line with central capabilities and work with the Zone Cyber lead and CISO team to drive change in the region
• Define regional KPIs to be able to measure changes in the region, which feed into global KPIs
• Implement cyber policy in the regions and evaluate regional policy exceptions (e.g. evaluating the risks of asking for a policy exception, co-solutioning to embed policies' requirements operationally)
• Run local cybersecurity risk assessments for critical projects and make recommendations
• Run regional training and awareness campaigns
• Support compliance assessments and work with local compliance to implement security controls for personal data
• Work with the Zone Cyber Lead and CISO team for escalations for crisis management
• Act as the incident response manager for the region, and response to incidents occurring locally which affect critical assets such as intellectual property, regulated data, customer data and the company's reputation
• Monitor and remediate critical vulnerabilities, actions from penetration tests and the backlog of items from local incidents

About You

• A recognized degree or Master or professional qualification in Information Technology, Cyber Security, or related discipline
• At least more than 7 years experience in technology and cybersecurity risk or related domain
• Ability to apply risk and control frameworks
• Experience in conducting and management penetration testing and vulnerability management is a must
• Recognized information technology / security certifications, such as CISSP, CISM, CISA etc are a plus
• Must be able to connect and collaborate effectively with key stakeholders within the organisation

About Us, We offer and What's next

Danone is a world leading food company built on three business lines; Specialized Nutrition, Waters and Fresh Dairy Products. Danone's mission is bringing health through food to as many people as possible and we want to invite people to join the movement for a healthier world. We recognize the power people have to impact the world through their daily choices. Each time we eat and drink, we vote for the world we want to live in. We believe a healthy body needs healthy food. And healthy food needs a healthy planet, and this is what our new signature One Planet One Health embodies

Danone is committed to create and live an inclusive & diverse environment, which will drive our growth as a business, as teams, as members of communities & as individuals. Valuing diversity is recognizing and respecting human differences and similarities. Our aim is to ensure that all employees and applicants are given equal opportunity and that our organization is representative of our consumers and society

We commit to foster an inclusive working environment where we celebrate all types of diversity, both visible and invisible, which includes age, race, gender, nationality, disability, background, education, religion, beliefs, thinking style, perspectives and sexual orientation

We believe that our differences will make the difference

For more information, please visit our website at https://careers.danone.com/sea/en/home.html