About this role
<p><span style=""><span style=""><b><span>MAIN PURPOSE</span></b></span></span></p> <p> </p> <p style="text-align:justify"><span style=""><span style=""><span>The IT Security Manager is tagged to Shiseido Asia Pacific, which regional headquarter is in Singapore. </span></span></span></p> <p style="text-align:justify"><span style=""><span style=""><span>Reporting to the Regional ICT Director, the incumbent is responsible for the IT security landscape for the region and will be in charge of securing the ecosystem, managing data protection, as well as ensuring the quality of security activities in all Affiliates Markets. </span></span></span></p> <p style="text-align:justify"> </p> <p style="text-align:justify"><span style=""><span style=""><span>The incumbent will lead and manage complex projects, support all IT Security related activities for the region and will work independently to manage the technical constraints. </span></span></span></p> <p style="margin-left:48.0px;text-align:justify"> </p> <p style="margin-left:48.0px;text-align:justify"> </p> <p><span style=""><span style=""><b><span>KEY RESPONSIBILITIES</span></b></span></span></p> <p><span style=""><span style=""><b><u><span>IT Security Management</span></u></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span>The incumbent is responsible for understanding and compliant with the group's safety policy and standards. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Understanding security and compliance standards in coherence with the group (data classification, cryptography standards, IT charter, JSOX, GDPR). </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Collaborate with the Group ICT team with understanding the safety policy, security governance and associated processes </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Work closely with related departments to assess the potential IT/security risk (including the evaluation of security risks of internal and external apps/tools) and put forth recommendation for security control implementation.</span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span><span style="">With guidance from Shiseido Group’s Security team, lead the implementation of security projects and IT solutions, including the evaluation and management of security partners, as </span>well as closely monitor to ensure IT policies have been adhered to.</span></span></span></li> </ul> <p class="MsoNoSpacing" style="margin-left:24.0px"> </p> <p class="MsoNoSpacing" style="margin-left:24.0px"><span style=""><span style=""> </span></span></p> <p style="margin-bottom:10.0px"><span style=""><span style=""><b><u><span>IT Security Operation </span></u></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span><span style="">With guidance from Shiseido Group’s Security team</span>, The incumbent is responsible for IT security operation such as Vulnerability Management, Incident Response, Security Alert monitoring, Security operation reporting</span></span></span></li> </ul> <p style="margin-bottom:10.0px"> </p> <p style="margin-bottom:10.0px"> </p> <p class="MsoNoSpacing"><span style=""><span style=""><b><u><span>Data Protection Management </span></u></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span>Provide solution and process to manage data risks and prevent the occurrence of data privacy-related incidents. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Lead the investigation by partnering closely with service providers and the business leads to conduct relevant testing to diagnose data privacy incidents and subsequently, advise on how to best manage the situation. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Ensure IT security, data protection requirements are in place by design at each project with the support of HQ</span></span></span></li> </ul> <p class="MsoNoSpacing" style="margin-left:24.0px"> </p> <p class="MsoNoSpacing"><span style=""><span style=""><b><u><span>IT Infrastructure </span></u></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span>Maintain local infrastructure and network (incl. VPN) to ensure optimal operations and to prevent disruptions. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Partner with IT shared service to ensure effective implementation of infrastructure for the region</span></span></span></li> </ul> <p class="MsoNoSpacing" style="margin-left:24.0px"> </p> <p class="MsoNoSpacing"><span style=""><span style=""><b><u><span>IT Crisis Management </span></u></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span>Manage IT Security in crisis of system outages and security attacks. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Process execution of the business continuity plan.</span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Represent Shiseido Asia Pacific and join forces with global/regional IT teams to execute projects.</span></span></span></li> </ul> <p class="MsoNoSpacing"> </p> <p class="MsoNoSpacing"> </p> <p class="MsoNoSpacing"><span style=""><span style=""><b><span>REQUIREMENTS</span></b></span></span></p> <ul> <li class="MsoNoSpacing"><span style=""><span style=""><span>Bachelor’s degree in Computer Science, Information Systems, or equivalent education. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>More than 5 – 8 years of relevant experience in IT infrastructure and Security. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Basic understanding of Security incident management and ITIL environment. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Basic understanding of Security Operation, such as Alert detection and response, vulnerability management</span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Basic understanding of Security solution implementation such as FW, EDR, SIEM, Anti malware, </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Demonstrate robust problem-solving skills and experience in critical infrastructure solutions. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Advantage to have experience in the Security & systems: Such as Proxy, FW, IPS, Antimalware, EDR, WAF, IAM</span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Familiarity with a global environment and comfortable working with stakeholders located in different regions. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>May require travel based on project needs. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Strong written and verbal communication skills. </span></span></span></li> <li class="MsoNoSpacing"><span style=""><span style=""><span>Collaborative and proactive. </span></span></span></li> </ul>