Regional Manager, Business Security & Governance

Responsibilities :

• Reporting to Asia CDI Security Director is responsible & accountable for Security Governance and Oversight for Thales DIS Asia Business, R&D and Outsourced activities (Manuf / SW Dev etc).
• Ensure that site security processes and procedures are setup and operated in accordance with Corporate and Site Security Polices & requirements.
• Support as needed site security management on all aspects of personnel, physical, production and IT security at the various card, secured documents production and personalization sites within the region responsible.
• Acting in accordance with the Corporate Security Management System and Policy to support the related site security management on all aspects of personnel, physical, logical, IT security at all Asia R&D / Outsource Manuf activities.
• Ensure the oversight of information security for the related sites in Asia region are in accordance to required org security requirements and compliance to applicable certification and regulatory requirements.
• Serves as a SME for the related stakeholders in Asia region in regard to any security queries, issues and provide appropriate solutions in line with the required compliance and risk level
• Support the sites in obtaining accreditation and then ensure ongoing compliance with the security regulatory requirements in respect for business / R&D security activities as per applicable standards such (CC / EMVCo, ISO27001, GSM-SAS etc).
• Cloud Platform Expertise : Deep understanding of security best practices and native security services within major cloud platforms (e.g., AWS, Azure, GCP). Specify which platforms are most relevant to your organization.
• Container and Kubernetes Security : Understanding of security best practices for containerized applications and orchestration platforms like Kubernetes in cloud environments.
• Serverless Security : Awareness of the unique security challenges and best practices associated with serverless computing (e.g., AWS Lambda, Azure Functions).
• Cloud Data Security : Expertise in implementing data loss prevention (DLP), encryption at rest and in transit, data masking, and other data security controls specific to cloud storage and databases.
• Perform Risk Assessment and regular audits for both internal and external stakeholders as per Accreditation or Corporate Standards and recommend and verify the implementation of solutions / controls.
• Ensure that Security risks and issues are appropriately managed in a measurable way and in accordance with Corporate policies and customer requirements
• Develop and maintain the Site Security Management System (SMS) to fulfill the regulatory requirements and ensure all Security KPI compliance to ensure & achieve desired level of security for Sites & Business Activities.
• Provide inputs and recommendations to management and take necessary steps to propose the security controls needed to protect information and assets as well as all business data and information of customers and partners.
• Act as the Tactical Process Manager between personnel responsible for security and organizational leaders to help organization achieve its strategic security objectives.
• Formulate security audit plan with Asia Security Director and perform internal cross-site audits in Asia region to ensure that controls and audit trials are in place to protect company assets.
• Monitor all security activities (Logical & Physical) and advice the management team on all matters concerning card / secured documents production security, IT system security as well as outsourced activities.
• To work with all business owners and departments to ensure the security requirements and deployment of security framework in all production sites as well as outsourced manufacturing activities.
• Lead and manage the investigation of any security breaches that has significantly impact to the business.
• Any other special projects as specified, as and when required.

The job holder shall always during the employment with the company, respect and comply with the Quality, Health, Safety, Environmental & Security requirements during the performance of his / her duties.

Requirements :