Regional Cybersecurity Manager & Acting DPO
Role Overview
Bluebell Group is seeking a highly skilled and resilient Regional Cybersecurity Manager to lead our information security strategy and act as the Group’s Data Protection Officer (DPO). Reporting directly to the Head of Cyber Security & IT Infrastructure, this dual-hatted role is critical to safeguarding our digital ecosystem across all our Asian markets.
The successful candidate will drive our transition into modern, Zero Trust architecture leveraging the Microsoft Security ecosystem, manage our external Security Operations Center (SOC), and ensure rigorous compliance with regional data privacy regulations.
Please note: This is a highly hands-on, individual contributor position. You will be the primary driver of both high-level strategy and ground-level technical execution, operating without a dedicated subordinate headcount. We are looking for a practitioner who is just as comfortable writing compliance policies as they are configuring firewall rules and investigating endpoint alerts.
Key Responsibilities:
Hands-on Cybersecurity Operations:
Directly oversee the deployment, administration, and optimization of our Microsoft security stack, including identity management, endpoint protection (XDR), device management, and data loss prevention (DLP) tools.
Act as the primary technical liaison managing our external 24x7 Security Operations Center (SOC), ensuring SLA adherence, rapid incident triage, and effective threat hunting.
Personally conduct regular vulnerability assessments, coordinate penetration testing, and execute patch management processes across the regional infrastructure.
Serve as the primary incident responder for internal escalations, actively investigating and remediating potential security breaches.
Acting Data Protection Officer (DPO) & Compliance:
Serve as the Group's subject matter expert on data privacy and cybersecurity regulations across all Asian markets where Bluebell operates.
Crucial Focus: Maintain a deep, actionable understanding of the stringent data security, cross-border transfer, and privacy regulations specific to all Bluebell markets.
Lead the creation, implementation, and automated enforcement (via DLP tools) of the Group Data Retention Policy across customer and employee HR data.
Act as the primary point of contact for regional data privacy regulatory bodies and manage statutory breach notification protocols if required.
Governance, Risk & Compliance (GRC):
Develop, maintain, and actively enforce comprehensive IT security policies, standard operating procedures (SOPs), and incident response playbooks.
Design and conduct security awareness training for corporate staff and retail employees across the region.
Qualifications & Requirements:
Experience: 5-8 years of dedicated experience in cybersecurity operations, incident response, and IT governance.
Technical Proficiency: Deep, hands-on administrative experience with modern cloud security architectures, specifically the Microsoft Security stack (Purview, Defender, Entra ID) and Endpoint Detection and Response (EDR/XDR) platforms.
Regulatory Knowledge: Strong understanding of the broader Asian data privacy and cybersecurity regulatory landscape. Demonstrated, practical expertise navigating compliance and data protection laws in China and South Korea is highly prioritized.
Certifications: Industry-recognized security certifications (e.g., CISSP, CISM, CISA) are required. Privacy certifications are a major plus.
Execution Focus: Proven ability to operate effectively as a standalone individual contributor, demonstrating a "roll-up-your-sleeves" mentality to independently execute technical and administrative tasks.
Languages: Fluent in business English (verbal and written) for regional collaboration. Fluency in Mandarin, Korean, or Japanese is highly advantageous for localized regulatory compliance.
Stakeholder Management & Influencing
Communication & Problem Solving
Crisis Management & Resilience
Collaboration & Teamwork
The Bluebell Spirit
We value individuals from all backgrounds who bring diverse perspectives, challenge thinking and contribute to shaping a stronger and more dynamic organisation.
Why Join Us
Joining Bluebell means stepping into a dynamic regional powerhouse with a family heart. Backed by a 70-year legacy across nine Asian markets, we offer a high-performance environment built on mutual respect and true autonomy, where your voice matters and your ideas shape retail in Asia.
Interested parties, please send your full resume via email to recruit.hk@bluebellgroup.com for an interview.
About Bluebell Group
Bluebell Group is Asia’s leading brand operator and distributor, and a trusted partner to over 150 global premium brands. A family-owned pioneer with over 70 years of experience across nine markets, the Group delivers excellence in retail, distribution and brand building, powered by entrepreneurship and a commitment to high-performance. Discover more at bluebellgroup.com.