A global, science-driven organisation in a highly regulated, data-intensive sector is hiring a senior security and technology leader for its China and Asia-Pacific operations. You will be the senior regional voice for the global security function. You will advise regional leadership, represent regional priorities to global teams, and act as the main escalation point during Asia-Pacific working hours.

This is a role for someone who combines strategic leadership with a hands-on approach. You will turn regulatory and privacy requirements into practical security and technology controls, and help the region grow securely within a mature global framework.

Key Responsibilities

Act as the senior regional representative for the global security function, giving decision support to regional business and technology leaders
Develop and maintain a regional cybersecurity strategy and roadmap aligned with enterprise objectives
Work with Privacy, Legal, Compliance and Quality partners to turn approved regulatory obligations (data protection, cross-border data transfer, incident reporting) into clear security requirements, architecture decisions and controls
Provide security review and guidance on technology, cloud, network, application, data and vendor initiatives
Lead or coordinate regional risk assessments, control reviews, exceptions and remediation, and document residual risk for the accountable business owner
Coordinate regional incident readiness and response, including escalation paths, exercises, regulatory-notification support and post-incident remediation, in line with the global process
Support regional audits by coordinating evidence, data-flow documentation, control narratives and remediation tracking
Assess regional vendors and oversee managed-service providers, including readiness, control adherence and issue resolution
Support security and technology readiness for new regional operations and business transitions, including due diligence, integration and separation
Build regional security metrics, risk reporting and executive materials
Document local requirements and exceptions while keeping divergence from global standards to a minimum

Essential

About you

Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, Risk Management or a related field (advanced degree preferred)
10+ years of progressive experience in cybersecurity, information security or security-focused technology, including regional, business-facing or cross-functional leadership
5+ years leading complex security, technology, risk, compliance, incident response, integration or operational-readiness work across multiple teams
Demonstrated experience supporting cybersecurity, data protection, cross-border data transfer or regulated operations in China (wider APAC experience strongly preferred)
Experience establishing, integrating or stabilising security and technology capabilities during a business transition or for a new regional operation
Experience coordinating services delivered by global teams and third-party providers
Experience supporting security, privacy, quality or regulatory audits
Strong influencing skills and the ability to lead through others in a matrixed, global environment
Professional-level English; Mandarin is a plus

Desirable

Experience in a regulated industry such as life sciences, healthcare or pharmaceuticals
CISSP, CISM, CRISC, CISA or equivalent
Willingness to travel within the region and work across global time zones

Regional Information Security & Technology Director