Full Time Regional Information Security Officer Jobs, in Gravitas Recruitment Group (Global) Ltd - Maukerja

Regional Information Security Officer

Role overview

Lead cybersecurity oversight across a multinational business portfolio, combining security programme leadership, technical assurance and executive advisory responsibilities.

You will work with business and technology leaders to identify material security risks, strengthen controls and translate enterprise security priorities into practical local action. The role includes leading security managers across multiple jurisdictions, advising senior decision-makers and building security awareness and accountability throughout the business.

Key Responsibilities

Security strategy and delivery

• Oversee implementation of enterprise security requirements across the portfolio, assessing progress, control effectiveness and outstanding risks.
• Work with technology leaders and delivery teams to advance agreed security priorities and address implementation gaps.
• Ensure wider security plans reflect business needs, operating conditions and local requirements.
• Provide leadership with clear assessments of programme delivery, security posture and emerging needs.

Risk assessment and technical assurance

• Evaluate cybersecurity risks and controls across business operations and technology environments.
• Oversee security assurance for technology projects, including security reviews, penetration testing, vulnerability assessments and adversarial testing.
• Drive resolution of security issues affecting applications, infrastructure, vulnerability management and patching.
• Support third-party cybersecurity assessments in coordination with enterprise assurance functions.
• Review and oversee exceptions to security policies, ensuring associated risks receive appropriate scrutiny.
• Contribute security expertise to business transformation, technology integration and acquisition-related activities.

Governance and compliance

• Maintain meaningful security metrics and escalate significant risks, control weaknesses and delivery concerns.
• Lead security governance discussions, prepare decision-ready materials and follow through on improvement actions.
• Present security risks, priorities and programme progress to executives, risk committees and boards.
• Track applicable cybersecurity obligations across jurisdictions and lead the security response to regulatory reviews and enquiries.
• Advise business leaders on external requests concerning cybersecurity controls.
• Support security-related audits and ensure findings within the role’s remit are addressed systematically.

Incident preparedness and response

• Coordinate with security operations, privacy specialists and executive stakeholders during cybersecurity incidents.
• Design and facilitate scenario-based exercises to strengthen incident readiness and cyber resilience.
• Assess relevant developments in the threat landscape and brief leadership on emerging threats and vulnerabilities.

Business engagement and security culture

• Build effective working relationships with senior business, technology, operations and risk leaders.
• Secure leadership support for cybersecurity improvements and encourage clear ownership of security risks.
• Work with privacy, legal, compliance and independent risk functions on shared security concerns.
• Represent the portfolio’s security needs in wider enterprise discussions.
• Deliver awareness initiatives that address relevant behaviours, business risks and local needs.

People leadership

• Lead security managers working across multiple jurisdictions, establishing clear responsibilities and performance expectations.
• Coach and develop team members, strengthen internal talent and maintain an inclusive, high-performing working environment.
• Coordinate with specialist security teams to support consistent delivery and continuous improvement.

Essential experience and capabilities

• Extensive, broad-based information security experience, including hands-on technical expertise and senior leadership responsibility.
• Demonstrated success leading security teams and delivering security programmes across multiple jurisdictions within a large multinational organisation.
• Experience aligning local implementation with wider enterprise security requirements.
• Confidence presenting cybersecurity matters to executive leadership, risk committees and boards.
• Strong understanding of recognised information security standards, control frameworks and established industry practices.
• Practical knowledge of application and infrastructure security, security controls, vulnerability assessment, application scanning and patch management.
• Ability to assess security problems, prioritise improvements and drive remediation to completion.
• Experience addressing cybersecurity regulatory requirements across different jurisdictions.
• Strong stakeholder influence, with the ability to gain support from business and technology leaders.
• Clear written and verbal communication, including the ability to explain technical risks to non-technical audiences.
• Ability to work independently and collaboratively within a matrix organisation.
• Experience working effectively in agile, fast-moving environments.

Preferred qualifications and background

• A degree in computing, information systems, information technology or a related discipline.
• Recognised professional certification in information security management, cybersecurity or security fundamentals.
• Familiarity with the business and operational context of a regulated organisation.

Interested candidates, please apply to this job posting, and send your CV with the job title as the subject line to: *************