IT & Data Regional Cybersecurity Manager APAC - VAPT

Danone Specialized Nutrition Business Services is seeking for IT & Data Regional Cybersecurity Manager, based in Malaysia. With our global presence, brands and business and our mission of bringing health through food to as many people as possible; we believe that people growth is a key asset to reach a sustainable business performance.
To succeed in this journey, we're looking for the right talent and personalities eager to bring their energy and ideas to a meaningful project. Take this opportunity to GROW together and experience a culture that empowers you to express your ideas and share what you're passionate about!  

The role is responsible to deliver cybersecurity programs, capabilities and change management, in the region. A self-starter and able to drive transformation in an ambiguous environment. The role will require a sharp and fluid mind to adapt global priorities to regional strategy to enable a secure environment for Danone.

Stakeholder Management

• Be the key cyber contact for the region and manage the relationships with the business, IT & DATA and Product Owners
• Articulate the value of cyber, understand cyber needs for the region (e.g. preventing and protecting crown jewel data and critical systems from cyber threats)
• Provide subject matter advice, guidance and counsel for key stakeholders and accountable for driving cybersecurity in the region

Capability & Change Management

• Drive cyber capability uplift for the region in line with central capabilities and work with the Zone Cyber lead and CISO team to drive change in the region
• Define regional KPIs to be able to measure changes in the region, which feed into global KPIs
• Implement cyber policy in the regions and evaluate regional policy exceptions (e.g. evaluating the risks of asking for a policy exception, co-solutioning to embed policies’ requirements operationally)
• Run local cybersecurity risk assessments for critical projects and make recommendations
• Run regional training and awareness campaigns
• Support compliance assessments and work with local compliance to implement security controls for personal data
• Work with the Zone Cyber Lead and CISO team for escalations for crisis management
• Act as the incident response manager for the region, and response to incidents occurring locally which affect critical assets such as intellectual property, regulated data, customer data and the company's reputation
• Monitor and remediate critical vulnerabilities, actions from penetration tests and the backlog of items from local incidents

• A recognized degree or Master or professional qualification in Information Technology, Cyber Security, or related discipline
• At least more than 7 years experience in technology and cybersecurity risk or related domain
• Ability to apply risk and control frameworks
• Experience in conducting and management penetration testing and vulnerability management is a must
• Recognized information technology / security certifications, such as CISSP, CISM, CISA etc are a plus
• Must be able to connect and collaborate effectively with key stakeholders within the organisation