Regional InfoSec and GRC Leader

About the role

This position sits within ABB's Robotics business, which is preparing for its acquisition by SoftBank Group. Reporting to the IS Manager, the Regional Information Security Lead is the single accountable InfoSec representative in the region, responsible for executing the global security program locally, embedding security into regional IT and business operations and acting as the first escalation point for security risks and incidents.

Key responsibilities

• Own regional information security execution, maintain the regional risk register and ensure alignment with global ISMS, policies and standards
• Ensure compliance with central InfoSec requirements and local security and compliance regulations
• Support implementation of security controls across endpoints, digital workplace, local infrastructure and cloud workloads, network controls and application security, and provide regional L2/L3 security support
• Coordinate regional incident response, evidence collection and post-incident remediation, and liaise with central SecOps / IR
• Coordinate audit evidence collection, site assessments and third-party security assessments, and support NIS 2 cyber security assessments for relevant legal entities
• Act as security advisor to regional business and IT leads, promote secure working practices and raise awareness of secure collaboration and data handling

Required profile

• 4-7 years of experience in cybersecurity
• Mandatory knowledge of local regulations such as the China Cyber Security Law and NIS 2
• Relevant certifications such as CISSP, CISM, cloud security or ITIL Foundation

Required skills

• ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK, OWASP, TISAX and SOX
• Familiarity with firewalls, WAF, SIEM, IAM, DLP, endpoint protection and cloud security