Director – Global Cybersecurity

Responsibilities: • Define and implement the global–regional cybersecurity operating model, including decision rights, responsibilities, escalation thresholds and functional coordination across regions and countries. • Develop the Group’s target security architecture and implementation roadmap covering network segmentation, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management. • Establish and enforce consistent global security-control baselines across critical systems, operating entities and privileged-access environments, with formal exception and risk-acceptance processes. • Provide technical security oversight for new platforms, system integrations, cloud migrations and digital initiatives, ensuring security requirements are incorporated throughout the technology-delivery lifecycle. • Lead the Group’s vulnerability and exposure-management programme, including asset discovery, vulnerability scanning, risk-based prioritisation, patching standards and external attack-surface reduction. • Oversee threat detection and security operations, including SIEM and EDR engineering, detection-rule development, alert triage, threat hunting, threat intelligence and the performance of the managed Security Operations Centre. • Establish and lead a wide Cybersecurity Incident Response Team with a common playbook, command structure, severity classification, escalation process and follow-the-sun response capability. • Serve as Incident Commander for material cybersecurity incidents, coordinating containment, recovery, forensic investigation, executive decision-making and regulatory, customer and stakeholder communications. • Strengthen cyber resilience by establishing immutable and segregated backup standards, testing recovery times for critical platforms and developing manual operational fallbacks for major system outages. • Develop and implement security controls for operational technology and logistics systems, including warehouse systems, automation equipment, robotics, transport platforms, fleet devices, facility systems and customer or carrier EDI/API integrations. • Lead identity, cloud and data-security initiatives, including consolidated identity management, phishing-resistant multifactor authentication, privileged-access management, cloud-security posture, encryption, key management, data-loss prevention and secure AI adoption. • Establish and maintain Group cybersecurity policies and control standards aligned with recognised frameworks such as ISO 27001, NIST Cybersecurity Framework or equivalent, while overseeing security awareness and phishing-resilience programmes. • Translate global regulatory and cross-border data requirements—including mainland China cybersecurity and data laws, GDPR, Singapore’s Cybersecurity Act and PDPA, and Hong Kong’s PDPO—into practical technical and operational controls. Requirements: • Minimum 12 years of cybersecurity experience, including at least five years leading technical security teams across multiple countries or regions. • Strong hands-on technical knowledge of security architecture, network security, cloud security, identity and access management, endpoint protection, vulnerability management, SIEM, EDR and security engineering. • Demonstrated experience building or transforming cybersecurity capabilities within a geographically distributed organisation with varying levels of security maturity. • Proven experience leading major cybersecurity incidents from detection and containment through recovery, executive communication, regulatory notification and post-incident remediation. • Experience establishing or operating a distributed Cybersecurity Incident Response Team and coordinating internal responders, external forensic specialists, legal advisers and managed-security providers. • Proven ability to lead cybersecurity professionals through a matrix structure, influence regional and country teams without direct authority, and establish common standards across diverse markets and cultures. • Working knowledge of at least two major cybersecurity or data-protection regimes, preferably including mainland China’s cybersecurity and data laws, EU GDPR, Singapore’s Cybersecurity Act and PDPA, or Hong Kong’s PDPO. • Experience securing operational technology, industrial systems or environments where system availability is critical and conventional patching or endpoint controls may not be practical. • Strong executive presence, communication and stakeholder-management skills, with the ability to explain complex cyber risks and investment decisions clearly to senior management, regulators, customers and Board committees. • Experience in logistics, freight forwarding, shipping, aviation, ports, rail or manufacturing is strongly preferred; relevant certifications such as CISSP, CISM, CCISO, GIAC, OSCP or cloud-security certifications, would be advantageous.