Cyber Security Manager

Role Overview

A regional retail company is seeking a highly skilled and resilient cyber security professional to lead its information security strategy while also serving as its Data Protection Officer (DPO). The successful candidate will be equally comfortable writing compliance policies and configuring firewall rules.

Responsibilities

• Manage and optimise a modern cloud security stack, including identity management, endpoint protection (XDR), device management, and data loss prevention (DLP) tools.

• Act as primary liaison to an external 24x7 Security Operations Center (SOC), ensuring SLA adherence and effective threat hunting.

• Conduct vulnerability assessments, coordinate penetration testing, and execute patch management.

• Serve as primary incident responder, investigating and remediating security breaches.

• Act as subject matter expert on data privacy and cyber security regulations across multiple markets, including cross-border transfer and privacy laws.

• Design and deliver security awareness training across corporate and retail staff.

Requirements

• Experience: 5+ years in cyber security operations, incident response, and IT governance.

• Technical Skills: Deep hands-on experience with cloud security architectures and EDR/XDR platforms.

• Regulatory Knowledge: Strong understanding of data privacy and cyber security regulations across Asian markets; practical expertise in China and South Korea highly prioritised.

• Certifications: CISSP, CISM, or CISA required; privacy certifications a plus.

• Languages: Fluent business English required; Mandarin, Korean, or Japanese highly advantageous.

• Core Competencies: Stakeholder management, influencing, communication, problem-solving, crisis management, resilience, collaboration, and teamwork.