CLUSTER IS / IT CYBERSECURITY LEADER - INDIA & SOUTH EAST ASIA

The  Cluster Cybersecurity Leader - India, Thaïland, Indonesia & Malaysia is responsible for implementing the organization’s information security strategy for its perimeter. This role ensures the protection of information assets, compliance with relevant regulations, and alignment with business objectives. Position reports directly to Group Cybersecurity & compliance Director.

Main activities include:

GOVERNANCE & AWARENESS

• Develop and Implement the regional information security strategy in alignment with global security policies and objectives.
• Informs and educate the employees on cybersecurity topics
• Conduct risk assessments & develop mitigation plans to address identified security risks
• Identify opportunities for improving site’s security posture

TECHNOLOGY STANDARDS

• Support the deployment of security tools and associated processes for the cluster

COMPLIANCE

• Monitor and report on compliance with the Group standards (compliance KPIs)
• ISMS coordinator within the cluster
• Assist in the development and implementation of local information security policies, procedures and guidelines in compliance with TISAX and local regulations
• Prepare and support internal and external audits, addressing any non-conformities identified during the audit process
• Conducts remote/on-site cybersecurity assessment for sites not belonging to the cluster

READINESS

• Responsible for the right implementation of site’s contingency plan
• Oversee the regional information security operations, including threat monitoring, incident response, and vulnerability management
• Triggers crisis cells in the event of a major disaster

MANAGEMENT REPORTING

• Report on the cluster security posture to the regional cybersecurity director and other cluster executives.

Required profile and experience:

• University degree or Engineering School with IT specialization or equivalent by experience.
• Minimum of 5 years of experience in IT operations with a focus on cybersecurity, in an industrial and international environment.
• Good knowledge of cybersecurity standards (ISO 27001, 21434, NIST …)
• Knowledge of information system and architecture principles.
• A Lead Implementer/Security Auditor certification is a bonus.
• IS security certification is a plus (CEH, CISSP, CISM, GIAC, GCIH…)

Key behavioral skills:

• Customer focus, delivery, and result orientation.  Ability to challenge & influence in a matrix organization
• Consistency and reliability. Ability to plan and organize activities efficiently.
• Teamwork, flexibility, and collaboration. Ability to work with multicultural teams.
• Problem-solving and decision-making abilities.
• Effective communication and interpersonal skills.
• Proficiency in English, another language is a plus.