Regional Information Security Officer, APAC

The Regional Information Security Officer, APAC is responsible for overseeing the cybersecurity strategy and risk management across our client’s General Insurance operations in Asia Pacific. This role ensures the deployment of cybersecurity programmes and fosters a security-aware culture within the region’s diverse markets.

Our client is a leading global insurer operating across complex regulatory environments, with a focus on managing information security risks and developing regional security capabilities. The organisation values proactive risk management and strategic partnerships with senior business leaders.

Role Overview

Reporting to the APAC RISO, the role involves managing a team of five information security managers and acting as a trusted advisor to regional executives, including CIOs, COOs, and CROs. The role covers programme governance, incident response, assurance activities, and security governance reporting. Success will be demonstrated through effective programme delivery, incident management, and the strengthening of security culture within the organisation’s APAC markets.

Key Skills & Experience

• Lead the deployment and monitoring of the cybersecurity programme across 14 markets


• Manage security assurance activities over IT projects and external compliance reviews


• Collaborate with global security teams and regional business leaders on security incidents and strategies


• Interpret and implement cybersecurity regulatory requirements specific to the region


• Present cyber risk status and security priorities to senior leadership, risk committees, and boards


• Lead and develop a team of regional security managers


• Foster a culture of continuous improvement and high performance within the security team

Key Responsibilities

• Govern and assure the deployment of the Cybersecurity Programme across the APAC General Insurance portfolio


• Monitor the implementation of CISO risk priorities with IT delivery teams and regional leadership


• Collaborate with global Security Operations Center, privacy, and executive teams during security incidents


• Assess and evaluate cyber risks and controls in the APAC markets


• Manage security assurance over IT projects, including reviews, penetration tests, and vulnerability assessments


• Report on cybersecurity metrics, escalate risks, and lead security governance forums


• Drive security awareness and culture initiatives within the region


• Provide security expertise to support transformation, M&A, and technology integration projects


• Maintain relationships with senior business leaders and influence cybersecurity risk management


• Lead the regional security team, fostering a culture of high performance and continuous development

Requirements

• 15+ years’ broad-based information security experience


• Demonstrable experience leading security teams across multiple markets


• Experience presenting cyber risk to executive leadership and boards


• Deep understanding of industry standards such as ISO 27000, NIST SP 800 / CSF, ISF SoGP


• Experience implementing security programmes across geographic portfolios


• Strong interpersonal skills and ability to work independently in a matrix environment


• Experience working with Asia region-specific regulatory compliance requirements


• Technical expertise in threat and vulnerability management, application security, and infrastructure security


• Ability to operate effectively in fast-paced, agile environments

If you have the relevant skills and experience, please apply with an updated CV.