Hub Cybersecurity Lead

Job Purpose

The APAC TSO Hub Cybersecurity Lead manages cybersecurity risks, implements global security standards, and protects HEINEKEN systems, data and technology operations across the APAC region. The role leads and develops the regional cybersecurity team and works with business and technology leaders and the Global Information Security team to apply HEINEKEN security requirements in line with local regulations and business needs. The role also coordinates cybersecurity incident response and serves as a key security contact for HEINEKEN businesses across APAC.

Role & responsibilities

Team Leadership

• Lead, coach and develop the APAC cybersecurity team.
• Coordinate security activities across regional technology teams and businesses.

Security Standards and Compliance

• Implement HEINEKEN cybersecurity policies and standards across APAC.
• Ensure compliance with relevant local regulations and company requirements.
• Work with Global Information Security teams to address regional security needs.
• Ensure global security key indicator thresholds are met.

Risk Management and Security Controls

• Assess cybersecurity risks for new systems, projects and technology changes.
• Review and approve regional security requests and identify non-compliant solutions.
• Monitor security controls, support audits and ensure that identified issues are resolved on time.
• Develop and track action plans to reduce security risks. • Identify regional opportunities to improve the cybersecurity agenda.

Cybersecurity Incident Management

• Act as the central contact between global teams responsible for cybersecurity incident coordination and management and HEINEKEN Operating Companies.
• Coordinate the remediation of identified security vulnerabilities. Global Information Security owns vulnerability identification and prioritisation; local asset owners are responsible for remediation.
• Support security investigations when required.

Technology and Operational Security

• Provide security guidance, based on global security policies, for IT systems, networks and industrial control systems used in production.
• Support effective security practices, including system updates, vulnerability management and access controls.
• Work with technology teams to integrate security requirements into new and existing solutions.

Security Awareness

• Support the delivery of global cybersecurity awareness training tailored to APAC business needs and drive completion.

• Promote good security practices across regional teams.

Planning and Reporting

• Develop regional cybersecurity improvement plans and coordinate required resources and budgets.
• Report key security risks, incidents, compliance gaps and improvement progress to regional management and Global Information Security teams.

Required Experience

• 10+ years of experience in PMO and IT.
• Minimum 8 years of experience in cybersecurity.
• More than 5 years of experience in cybersecurity or IT audit, with previous experience as a Cybersecurity Officer or Manager.
• Extensive understanding of the HEINEKEN D&T organisation.

Functional Competencies

• Business analysis: interpret customer needs and convert them into initiatives.

• Project management, strategic planning and resource management.

• Relevant professional qualifications, such as CISSP, CISM, ISSMP, CISA, CIA, CSTA, CSTP, CIIP, CFIP, CSIS, CMI or CWSA, or equivalent.

• Identify and drive opportunities to improve information security efficiency.

• Knowledge of and practical experience with frameworks and standards such as NIST, ISO 27000 series and IEC 62443.

• Experience with business impact assessments and security assessments.

• Act as a cybersecurity ambassador by communicating information security and risk requirements to product teams and global functions.

• Explain cybersecurity governance and processes to business stakeholders.

• Recognise problems, identify possible causes and resolve issues.

• Work effectively with people from different teams and cultures.

• Adapt to multiple demands, changing priorities, ambiguity and rapid change.

• Apply strong analytical and reporting skills.

• Write reports, procedures and policies, and communicate effectively in different situations.

• Establish and maintain effective working relationships with internal and external organisations, teams and individuals