MAIN PURPOSE The Information Security Manager is tagged to Shiseido Asia Pacific, which regional headquarter is in Singapore. Reporting to the Regional ICT Director, the incumbent is responsible for the Information Security landscape for the region and will be in charge of securing the ecosystem, managing data privacy and protection, as well as ensuring the quality of security activities in all Affiliates. The incumbent will lead and manage complex projects, support all Information Security related activities and will work independently to manage the technical constraints. KEY RESPONSIBILITIES Information Security <ul> <li class="MsoNoSpacing" style="text-align:justify"> The incumbent is responsible for enforcing the group's safety policy and standards: </li> <li class="MsoNoSpacing" style="text-align:justify"> Formulate the information security strategy that are aligned to group directions and cater to requirements. </li> <li class="MsoNoSpacing" style="text-align:justify"> Lead the development of security and compliance standards in coherence with the group (data classification, cryptography standards, IT charter, JSOX, GDPR). </li> <li class="MsoNoSpacing" style="text-align:justify"> Collaborate with the Group ICT team to define and develop the safety policy, security governance and associated processes </li> <li class="MsoNoSpacing" style="text-align:justify"> Work closely with related departments to assess the potential IT/security risks within all affiliates (including the evaluation of security risks of internal and external apps/tools) and put forth recommendation for security control implementation. </li> <li class="MsoNoSpacing" style="text-align:justify"> With guidance from Shiseido Group’s Security team, lead the implementation of security projects and IT solutions, including the evaluation and management of security partners, as well as closely monitor to ensure IT policies have been adhered to. </li> </ul> Data Privacy Management Implement the data privacy as per Shiseido Security Group. <ul> <li class="MsoNoSpacing" style="text-align:justify"> Monitor the compliance of the Personal Information Protection Law across Affiliates </li> <li class="MsoNoSpacing" style="text-align:justify"> Provide guidance to stakeholders to manage data risks and prevent the occurrence of data privacy-related incidents. </li> <li class="MsoNoSpacing" style="text-align:justify"> Lead the investigation by partnering closely with service providers and the business leads to conduct relevant testing to diagnose data privacy incidents and subsequently, advise on how to best manage the situation. </li> <li class="MsoNoSpacing" style="text-align:justify"> Maintain documentation of key functional and technical documents related to data privacy. </li> <li class="MsoNoSpacing" style="text-align:justify"> With guidance from HQ, define and deploy the processes and controls of personal data to ensure compliance with GDPR (follow EMEA DPO and accountable to HQ), but also other countries privacy law become tight including PDPA and privacy act in Japan </li> <li class="MsoNoSpacing" style="text-align:justify"> Ensure IT security, privacy requirements are in place by design at each project with the support of HQ </li> </ul> IT Governance & Crisis Management <ul> <li class="MsoNoSpacing" style="text-align:justify"> Manage the crisis of system outages and security attacks. </li> <li class="MsoNoSpacing" style="text-align:justify"> Establish and continue to refine the business continuity plan. </li> <li class="MsoNoSpacing" style="text-align:justify"> Represent Shiseido Asia Pacific and monitor global/regional IT teams to execute projects. </li> </ul> REQUIREMENTS <ul> <li class="MsoNoSpacing" style="text-align:justify"> Bachelor’s degree in Computer Science, Information Systems, or equivalent education. </li> <li class="MsoNoSpacing" style="text-align:justify"> 5 – 10 years of relevant experience in IT infrastructure and Security. </li> <li class="MsoNoSpacing" style="text-align:justify"> Advanced understanding of Security incident management and ITIL environment. </li> <li class="MsoNoSpacing" style="text-align:justify"> Expertise in Privacy and Data Protection. </li> <li class="MsoNoSpacing" style="text-align:justify"> Demonstrate robust problem-solving skills and experience in critical infrastructure solutions. </li> <li class="MsoNoSpacing" style="text-align:justify"> Advantage to have experience in the Security & systems: Such as Proxy, FW, IPS, Antimalware, EDR, WAF, IAM </li> <li class="MsoNoSpacing" style="text-align:justify"> Familiarity with a global environment and comfortable working with stakeholders located in different regions. </li> <li class="MsoNoSpacing" style="text-align:justify"> May require travel based on project needs. </li> <li class="MsoNoSpacing" style="text-align:justify"> Strong written and verbal communication skills. </li> <li class="MsoNoSpacing" style="text-align:justify"> Collaborative and proactive. </li> </ul>

Asia Pacific - Regional Information Security Manager (Singapore, 01, SG) @ Shiseido

About this role

Ready to apply?