關於這個職位
This role is responsible for overseeing the regional IT infrastructure and cybersecurity strategy, managing both Infrastructure Operations, Cybersecurity, Application Security & Governance. The candidate will drive the vision, strategy, and execution of robust, secure, and scalable IT services across the region, ensuring alignment with business objectives and compliance with Group standards. The role requires hands-on technical expertise, management capabilities, and the ability to collaborate with IT and business leaders across markets.
我們希望你具備
- Management
- Lead, mentor, and develop technical team members.
- Foster a high-performance, collaborative, and inclusive team culture.
- Set clear objectives, KPIs, and development plans for direct reports.
- Manage resource allocation, recruitment, and succession planning for the team.
- Strategy & Vision
- Define and execute the regional infrastructure and cybersecurity strategy in alignment with Group IT and business goals.
- Develop and communicate a forward-looking vision for infrastructure modernization, cloud adoption, and cybersecurity resilience.
- Liaise with senior IT and business leaders to ensure technology initiatives support business priorities.
- Stay current with emerging technologies, security threats, and industry trends to proactively address risks and opportunities.
- Operational Excellence
- Oversee the operation and optimization of regional data centers, cloud platforms (Azure, AWS, Oracle), networks, and IT services.
- Ensure adherence to ITSM/ITOM processes (service request, incident, problem, change, knowledge, and operation management).
- Maintain and enhance disaster recovery, backup, and business continuity plans.
- Drive continuous improvement in service quality, reliability, and security.
- Cybersecurity & Governance
- Oversee the implementation and ongoing development of security management frameworks, with a focus on application and infrastructure security.
- Ensure compliance with internal policies and global standards (NIST, ISO 27001, PCI DSS).
- Support and guide technical security assessments, vulnerability management, and secure coding practices.
- Lead incident response and post-incident reviews for infrastructure and application security events.
- Provide expert guidance and, when necessary, direct involvement in complex technical issues, troubleshooting, and operational tasks.
- Stakeholder Engagement
- Act as a key liaison with SEA markets and other regional/country IT teams to execute Group Infrastructure and Cybersecurity initiatives.
- Collaborate with vendors, suppliers, and external partners for solution evaluation, contract negotiation, and project delivery.
- Represent IT in cross-functional meetings, audits, and strategic planning sessions.
- Requirements
- Degree in Computing, Information Security, or related discipline.
- Minimum 10 years’ experience in IT infrastructure, operations, and cybersecurity, with at least 3 years with management responsibility.
- Proven track record in managing technical teams and delivering enterprise-scale IT projects/services.
- Solid technical background in infrastructure (LAN/WAN, cloud, virtualization, Microsoft 365, Active Directory, DR/Backup) and application security (SDLC, DevSecOps, vulnerability management, security tools).
- Experience in F&B, retail, or manufacturing environments is an advantage.
- Relevant certifications (MCSE, CCNA/CCNP, VMware, ITIL, PMP, CISSP, OSCP, CEH, etc.) are highly desirable.
- Strong strategic thinking, problem-solving, and analytical skills.
- Excellent communication, negotiation, and stakeholder management abilities.
- Fluent in written and spoken English; proficiency in Cantonese is a plus.