Regional Information Security & Technology Director

A global, science-driven organisation in a highly regulated, data-intensive sector is hiring a senior security and technology leader for its China and Asia-Pacific operations. You will be the senior regional voice for the global security function. You will advise regional leadership, represent regional priorities to global teams, and act as the main escalation point during Asia-Pacific working hours.

This is a role for someone who combines strategic leadership with a hands-on approach. You will turn regulatory and privacy requirements into practical security and technology controls, and help the region grow securely within a mature global framework.

Key responsibilities

• Act as the senior regional representative for the global security function, giving decision support to regional business and technology leaders
• Develop and maintain a regional cybersecurity strategy and roadmap aligned with enterprise objectives
• Work with Privacy, Legal, Compliance and Quality partners to turn approved regulatory obligations (data protection, cross-border data transfer, incident reporting) into clear security requirements, architecture decisions and controls
• Provide security review and guidance on technology, cloud, network, application, data and vendor initiatives
• Lead or coordinate regional risk assessments, control reviews, exceptions and remediation, and document residual risk for the accountable business owner
• Coordinate regional incident readiness and response, including escalation paths, exercises, regulatory-notification support and post-incident remediation, in line with the global process
• Support regional audits by coordinating evidence, data-flow documentation, control narratives and remediation tracking
• Assess regional vendors and oversee managed-service providers, including readiness, control adherence and issue resolution
• Support security and technology readiness for new regional operations and business transitions, including due diligence, integration and separation
• Build regional security metrics, risk reporting and executive materials
• Document local requirements and exceptions while keeping divergence from global standards to a minimum

About you

Essential

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, Risk Management or a related field (advanced degree preferred)
• 10+ years of progressive experience in cybersecurity, information security or security-focused technology, including regional, business-facing or cross-functional leadership
• 5+ years leading complex security, technology, risk, compliance, incident response, integration or operational-readiness work across multiple teams
• Demonstrated experience supporting cybersecurity, data protection, cross-border data transfer or regulated operations in China (wider APAC experience strongly preferred)
• Experience establishing, integrating or stabilising security and technology capabilities during a business transition or for a new regional operation
• Experience coordinating services delivered by global teams and third-party providers
• Experience supporting security, privacy, quality or regulatory audits
• Strong influencing skills and the ability to lead through others in a matrixed, global environment
• Professional-level English; Mandarin is a plus

Desirable

• Experience in a regulated industry such as life sciences, healthcare or pharmaceuticals
• CISSP, CISM, CRISC, CISA or equivalent
• Willingness to travel within the region and work across global time zones