Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA
Core
Own the security policy framework, risk register, and exception process; manage third-party risk from onboarding to monitoring; lead audits and compliance (SOX, ISO, EU AI Act); run the offshore security site in Southeast Asia.
Role type
Director, Global Cybersecurity GRC & Third-Party Risk Management
Builds
Security policy framework, risk register, exception process, vendor risk assessments, audit evidence, and regional security operations.
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC), Third-Party Risk Management (TPRM), Regulatory Compliance
Deliverable
dashboards & analysis
Required skills
Cybersecurity policy management, risk register management, exception process management, vendor risk assessment, audit leadership (SOX, ISO 27001), EU AI Act compliance, team leadership, regional regulatory engagement
Preferred skills
None stated
Technologies
None stated
Responsibilities
Own the security policy framework, risk register, and exception process; Run vendor risk assessments from onboarding to ongoing monitoring; Lead SOX, ISO, and customer security audits; Run the offshore security site including hiring and operations; Act as the cybersecurity point of contact for Southeast Asia.
Seniority
Director, strategic leadership & regional management