Head of Cyber Risk Management and Resiliency

About the role

Head of Cyber Risk Management and Resiliency The Head of Cyber Risk Management and Resiliency provides regional leadership for cyber risk management across all Asia markets supported by the Asia CISO function. The position is responsible for consistent risk interpretation, risk documentation quality, residual risk validation and prioritization of cyber risks across the region. The role leads the Country Cyber Leads (BUSOs) within a centralized regional structure to improve alignment, ensure consistent application of enterprise expectations and strengthen the region's ability to identify, articulate and manage cyber risks. The role also provides regional leadership for cyber resiliency, including incident readiness, maintenance of regional incident response playbooks, coordination of simulation routines and support for cross‑market cyber incident management. This includes ensuring alignment with Global Cyber Incident Management requirements and strengthening escalation discipline and cross‑market execution during Priority 1 and Priority 2 incidents. This is a senior leadership role within the Asia CISO organization. It requires the ability to lead a diverse and geographically dispersed group of Country Cyber Leads (BUSOs), operate effectively across markets with varying levels of maturity and collaborate with senior technology leaders, business stakeholders and regulatory partners across the region. Position Responsibilities: Provide regional ownership for cyber risk management across Asia, including consistent interpretation of cyber risks, residual risk validation and documentation quality for Issues, Corrective Action Plans and Exception Requests. Lead the Country Cyber Leads (BUSOs) as a unified regional team to ensure consistent application of standards, alignment with enterprise risk expectations and effective engagement with market technology leaders and regulators. Oversee the quality and clarity of risk documentation to support accurate, defensible and consistent articulation of cyber risks across all markets. Lead regional cyber resiliency, including incident readiness practices, maintenance of playbooks, coordination of simulation exercises and alignment with global incident management processes. Provide regional leadership during cross‑market cyber incidents, ensuring effective communication, escalation discipline and execution of Global Cyber Incident Management directives. Aggregate and analyze regional cyber risk themes, patterns and systemic issues to provide actionable insights to Asia leadership and global stakeholders. Partner with Security Risk Assessment and Advisory, Security Engineering and Program Delivery to ensure risk management practices are embedded consistently across transformation initiatives. Support regulatory and audit interactions by ensuring consistent and complete risk documentation and by providing regional interpretation of cyber risk posture. Accountability for regional cyber risk interpretation across all Asia markets. Final decision authority for residual risk validation and the adequacy of risk documentation for Issues, Corrective Action Plans and Exception Requests. Ownership of regional incident readiness and associated playbooks, simulation plans and expectations. Lead regional aggregation and reporting of cyber risk themes and systemic exposures. Provide final escalation decisions on cyber risk matters requiring regional intervention. Work with Country Cyber Leads (BUSOs) to maintain local engagement with market technology leadership while ensuring consistent regional standards and expectations. Collaborate with Security Risk Assessment and Advisory to ensure assessment outcomes are incorporated into risk decisions and prioritization across markets. Coordinate with Line 1B Technology Risk for workflow processes involving tracking, timelines and documentation management. Partner with Security Engineering and Enablement and architecture functions to ensure risk treatment strategies reflect technical constraints and enterprise requirements. Engage Cyber Program Delivery to ensure cyber risk management activities are aligned with regional transformation timelines and dependencies. Required Qualifications: Extensive experience (typically 12 or more years) in cyber risk management, cyber resilience or cybersecurity leadership roles across multiple markets. Strong understanding of enterprise cyber risk frameworks, global incident management processes and regulatory expectations across Asian jurisdictions. Proven ability to lead diverse regional teams, build alignment across markets with varying maturity and influence senior technology and business stakeholders. Experience coordinating incident response activities, readiness planning and conducting structured simulation exercises. Strong analytical and communication skills, including the ability to interpret and articulate complex cyber risks for a non-technical audience. Experience support