Deskripsi Pekerjaan
Join British American Tobacco as our APMEA Regional Information Security Officer (RISO) and become a guardian of our digital frontier. This pivotal role empowers you to orchestrate comprehensive cybersecurity strategies across the dynamic Asia Pacific, Middle East, and Africa (APMEA) region. You'll lead the charge in identifying, assessing, and mitigating cyber risks while ensuring stringent compliance with global security frameworks. Collaborate with cross-functional stakeholders to embed security into business processes, drive security awareness initiatives, and champion a culture of resilience against evolving cyber threats. Your expertise will directly safeguard critical assets, support regulatory compliance, and enable secure digital transformation across diverse markets.
Tanggung Jawab
- Develop and implement regional information security strategies aligned with global standards and APMEA market requirements
- Lead enterprise-wide risk assessments and mitigation programs for cyber threats across APMEA operations
- Ensure compliance with international security frameworks (ISO 27001, NIST, GDPR) and regional regulations
- Manage security incident response protocols, including forensic investigation and recovery planning
- Oversee third-party risk assessments and vendor security management programs
- Drive security awareness training and champion security culture across regional offices
- Collaborate with IT leadership to integrate security controls into digital transformation initiatives
Kualifikasi
- Bachelor's degree in Computer Science, Information Security, or related field; Master's preferred
- 10+ years in cybersecurity with minimum 5 years in regional/global security leadership roles
- Expert knowledge of security frameworks (ISO 27001, NIST CSF, COBIT) and regulatory compliance
- Proven experience in managing security operations, incident response, and risk management programs
- Strong understanding of APMEA regional business environments and regulatory landscapes
- CISSP, CISM, or equivalent security certification mandatory
- Exceptional communication skills with ability to influence stakeholders across diverse cultures