Information Security & Resilience Consultant APAC

at  ABRDN PLC

IF YOU NEED ASSISTANCE OR AN ADJUSTMENT DUE TO A DISABILITY PLEASE LET US KNOW AS PART OF YOUR APPLICATION AND WE WILL ASSIST.

Job ID R0071874

PURPOSE AND BACKGROUND

• To support the Regional Information Security Officer in all matters relating to Information Security, Technology Risk, Data Privacy, Operational Resilience and Third Party Risk Management working closely with regional and in country teams, as well as head office based colleagues in Security, Privacy & Resilience.
• To assist in ensuring the APAC business proactively manages security risks in line with risk appetite and operates in a way that complies with the requirements of the relevant regulations and legislations.
• To act as a point of contact for our business in APAC on security matters and maintain a productive working relationship with the wider business.
  This role reports into the Head of Technology, Security Resilience & Third Party Governance, APAC.

ROLES AND RESPONSIBILITIES

• Support regional businesses and teams in the matters of Information Security, Technology Risk, Data Privacy, Operational Resilience and Third Party Risk Management for activity relating to project, regulatory liaison or assessment, client reporting as well as supporting ongoing business operations.
• Review, assess and interpret in country regulations and legislation in relation to the remit of Security, Resilience, and Protection.
• Assist in the oversight the region and countries’ risk and compliance position in relation to Security, Resilience, and Protection and report regularly on plans, key risks and issues.
• Prepare new initiatives, projects, or material business / IT changes support the preparation of security risk assessments and data privacy impact assessments.
• Support the delivery of security related education and awareness for colleagues across APAC.
• Recommend improvements in practices, processes and capabilities to ensure that the business operates to the required standards and within risk appetite.
• Prepare regular reporting on regional status of topics on Security, Resilience, and Protection.
• Coordinate and respond in the event of security/privacy incidents.
• Engage the business stakeholders directly on Security, Resilience, and Protection related projects.