Regional Information Security Manager APAC

Asendia empowers businesses to grow across borders with a range of international e-commerce and mail delivery services. Launched in 2012 by La Poste and Swiss Post, Asendia has the combined expertise of over 1500 employees across 4 continents. With operations across the world, we bring together a wealth of international and local expertise, and a network that delivers to over 200 countries and territories. Asendia's heritage as a mail business is unrivalled, but today we are also at the forefront in providing e-commerce parcel solutions for e-tailers selling internationally. We provide a number of value-added services too, including returns, fulfilment and lettersshops, and we have acquired a number of companies to enhance our services, including eShopWorld a global e-commerce software business.

Asendia is committed to providing equal opportunities. In accordance with the applicable local laws, regulations, and ordinances, all qualified applicants will receive fair consideration for employment without regard to age, race, gender, religion, national origin, ethnicity, sexual orientation, marital status and family responsibilities, disability, or any other protected characteristics.

Regional Information Security Manager APAC

Role Purpose

We are seeking a Regional Information Security Manager APAC to join our APAC Risk, Compliance & Security team. Reporting to the Regional Risk and Compliance Officer, you will predominantly be responsible for the hands-on implementation and day-to-day operation of the Group Information Security strategy on your perimeter, in strong coordination with the local entities and APAC IT team, and functionally report to the Group Chief Information Security Officer (CISO).

This is an operational role: you will personally lead the roll-out and ongoing management of security tools and processes, own first-level alert analysis, evaluation, and triage, and drive the day-to-day coordination of local security incident mitigation – not merely oversee these activities from a policy or risk standpoint. You will also ensure controlling policies are understood and applied in the region, drive security awareness locally in line with the Group and with the shareholders, and participate in Group security committees to feed region specificities. You will serve as the regional guardian of Group security policies, combining strong technical, hands-on security operations with governance responsibilities, to ensure adherence to Group standards and security requirements. You will also lead or contribute to transversal projects and ensure controlling policies are understood and applied in the region, drive security awareness locally in line with the Group and with the shareholders, and participate in Group security committees to feed region specificities. This position shall be based in either Hong Kong or Singapore.

Your Tasks

A. Stakeholder Engagement & Governance

• Drive and execute on regional security implementation alignment across APAC sites.
• Work closely and proactively with stakeholders in local subsidiaries and the regional office to identify potential security issues and provide pragmatic solutions and recommendations.
• Act as the focal point of contact in APAC to provide practical guidance regularly on the application of Group security policies to safeguard Asendia's assets.
• Analyze and report on regional security scope contribution via dashboard visualization to the CISO.
• Participate in monthly Group CISO meetings.

B. Security Operations & Service Management

• Coordinate and follow up on recurrent security activities (e.g. backup tests, monthly patching, Active Directory review and clean-up) across APAC.
• Oversee security solutions/tools (EDR, Email protection, XDR/SIEM, Vulnerability scan, etc.) service management and first level escalation.
• Manage daily security operational activities, initial diagnosis/triage, and SOC managed services coordination.
• Coordinate and follow up on security project build and deployment action plans.

C. Compliance, Audit & Regulatory Alignment

• Control the implementation of Group security policies and procedures.
• Support policy compliance and internal and external audits.
• Coordinate any audits, certifications, and regulatory reporting that may be required for APAC operations.
• Work with Business stakeholders to collect and review local information security requirements, regulations, and other necessary information to assist local subsidiaries in complying with them.

D. Incident & Crisis Management

• Coordinate security incident management and possible regional cyber crisis management, acting as the main point of contact for security incidents within APAC.

E. Security Awareness & Culture

• Conduct regional awareness campaign coordination (phishing campaigns, develop and deliver regular security messages and training to strengthen the overall security culture, coordination with other involved stakeholders).

Your Profile

• Bachelor's degree in information technology, Computer Science, Cybersecurity with at least 5 years of experience, or equivalent technical or security qualifications and experience learned on the field.
• Strong understanding of cybersecurity technical implementation and Information System security analysis skills. CISSP certification preferred. Minimum requirement: ISC2 CC or other recognized cybersecurity certification.
• Good understanding of current cybersecurity threat intelligence, trends, and market solutions.
• Experience in leading projects to oversee potential Cybersecurity workstream management.
• Strong coordination skills to facilitate communication between stakeholders, ensuring Group policies are understood and applied, and managing implementation or exception follow-up.
• Good working knowledge of APAC's regulatory landscape (e.g. data protection and privacy requirements).

Asendia APAC Core Competencies

• Ability to execute on strategic plans and provide improvement measures to management, and ensures the work adds value by contributing to the growth of the business.
• Skilled in tailoring message to the audience with audience targeted presentation skills and confidently delivering consistent and clear messaging to diverse audience, with good documentation.
• Ability to translate ambiguity to action and implement change management methodologies.

Our Facts

Our mission is to excel in every interaction with our customers. Our values are deliver for our customers, strive for excellence, collaborate as one team and our commitment to sustainability.

Driving success, communicating information, and adjusting to change are essential competencies that drive our strategy in APAC.

Employees wellbeing and corporate social responsibility are at the heart of our core values. We wish to instil a strong culture of corporate social responsibility within every employee and hope to create a positive and productive environment where employees can thrive.

If this sounds like the kind of place you would like to work and the sort of role you are looking for, then get in touch, we are waiting to hear from you.

Please send your application in English to: [Confidential Information], indicating reference number ISMAP_0826_ASAP.

All personal data collected will be used for recruitment related purposes and treated in strictest confidentiality. Only shortlisted candidates will be informed. All personal data supplied will be destroyed after completion of the recruitment process.