Regional Information Security Officer (RISO)

Description:

The Regional Information Security Officer (RISO) serves as the key cybersecurity and data protection leader within the region, acting as a strategic liaison between the Global CISO organization and regional ICT/business units. The RISO ensures alignment with global security objectives, drives regional compliance, and fosters a culture of risk awareness and resilience across ICT and business functions regionally

Key responsibilities:

Strategic & Governance Alignment

• Support and implement global CISO transformation initiatives within the region.
• Ensure regional compliance with global cybersecurity policies, standards, and objectives.
• Act as the primary liaison between the Global CISO team and regional business units to facilitate risk reduction and leadership awareness.

Cybersecurity Operations & Incident Management

• Coordinate with the Cyber Security Operations Center (CSOC) for regional incident response, crisis management, and business continuity.
• Collaborate with the Data Privacy Office during data breach events, ensuring compliance with regional regulations (e.g., GDPR, LGPD).
• Support OT cybersecurity initiatives and legacy system/application security, including IAM and access controls.

Compliance & Risk Management

• Partner with SCRT (Strategy & Governance, Risk and Compliance) for regional security attestations and regulatory compliance (e.g., SEC, CSL, E-Cyber, NIS2).
• Conduct and lead regional cybersecurity and data privacy committee meetings.
• Ensure the cascade of decisions from Data Privacy, Risk & Compliance committees to regional ICT leadership.

Stakeholder Engagement & Communication

• Lead RISO governance rituals with the CIO/Regional ICT Delegate and relevant ICT & business stakeholders.
• Provide local language communication support for cybersecurity awareness and initiatives.
• Act as a regional point of contact for urgent approvals and escalations.

Talent & Resource Management

• Oversee regional cybersecurity internship programs.
• Support regional HR requirements related to cybersecurity roles and responsibilities.
• Collaborate with regional finance, legal, and purchasing teams on contract management and budget oversight.

Integration & Architecture

• Contribute to the secure integration of new IT systems in alignment with regional legal and data protection requirements.
• Maintain awareness of regional infrastructure, including dedicated vs. shared architecture (e.g., China vs. Rest of World).

Required Qualifications:

• Bachelor's or Master's degree in Information Security, Computer Science, or related field.
• Professional certifications (e.g., CISSP, CISM, CISA) preferred.
• Proven experience in cybersecurity leadership within a multinational environment.
• Strong understanding of regional regulations and global security frameworks.
• Excellent communication skills in English and local language(s).