BAT is evolving at pace - truly like no other organization.
To achieve the ambition, we have set for ourselves, we are looking for colleagues who are ready to live our ethos every day. Come be a part of this journey!
ROLE POSITIONING AND OBJECTIVES
Reporting Level: Individual Contributor
Geographic Scope: Malaysia
Seniority Level: Experienced Professional
OVERVIEW OF THE ROLE
Maintain a working and strategic relationship and engagement with a designated market, in Cyber Security. Be the partner for the market to quickly address the needs of the markets (like risk assessments, trainings, incidents); but also, to ensure key Cyber Resilience initiatives are implemented there. This may include, but is not limited to: OT deployments, Cyber Hygiene / vulnerability management, awareness campaigns, risk management, incident communication and support of cyber compliance initiatives.
Work with other Cyber Security teams (“back-office”) to make sure they deliver relevant and timely services to the markets.
Maintain security expertise in a designated domain like finance, supply chain, marketing, trade systems or system integrations.
What is the direct impact of this role on the team or organization?
Crafting security posture of several markets. Influence the LTs to consider cyber security as a vital ingredient of their projects, explain risks and carry out remediation (or acceptance).
WHAT YOU WILL BE ACCOUNTABLE FOR
- Be the 1st contact for security matters for market. Align priorities of cyber security tasks / project and communicate them back to Cyber Security team. Represent Cyber Security on DRBU and lower levels.
- Deliver aligned cyber security important metrics in a designated market. Coordinate and implement actions needed to be on target.
- Translate business requirements to relevant Cyber Security team members offering and coordinate delivery in a market
- Markets Roadmap key projects cyber enablement, risk assessments and advisory for initiatives coming from your DRBU or other regional / global projects within the domain of your expertise. Reassessments of risks after agreed time, to ensure continuous cyber safety.
- Drive global or regional security projects linked to your area of expertise.
- Management of cyber risk with appropriate team members.
- If applicable, deployment of OT security projects withing the market / the region.
- If applicable, ownership for tools and processes linked with risk assessment and assurance globally (AURA, SAT, flexible assurance, self-assessments).
- Contribution with GRC cyber standards and procedures.
ESSENTIAL EXPERIENCE, SKILLS AND KNOWLEDGE
- 5+ years of professional experience in information security with a record of growing scope and responsibility.
- Experience handling and communicating with business partners on different levels, up to director level.
- Ability to translate technical language into readily understandable language for business users.
- Experience assessing cyber risks of projects, vendors and technologies.
- Experience with and understanding of information security management, technologies, architecture and audits.
TECHNICAL, FUNCTIONAL AND LEADERSHIP SKILLS
- Knowledgeable of security aspects related to networking, application development, ops, incident response, 3rd party vendor management and OT.
- Deep, end-2-end security knowledge accompanying at least one business area: manufacturing, finance, marketing / eCommerce, HR, legal, supply chain, sales / trade, physical security.
- Understanding cloud and SaaS configuration management and risk reduction (focus on Azure and AWS) and how to protect and detect potential threats in those environments.
- Ability to think clearly, prioritise and make decisions under time-sensitive and fast paced conditions.
- Business acuity, ability to articulate both businesses, commercial and technical ideas clearly and simply.
- Documented PM experience in the area of security or IT (small to medium projects).
WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.
At BAT, we champion collaboration, inclusion, and partnership as the bedrock of our values. We wish to foster an environment where every individual can thrive, irrespective of factors such as gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, as well as diverse perspectives and thinking styles. We recognise that our strength lies in embracing talent from all walks of life, empowering us to develop our culture of inclusivity and better achieve our business objectives.
We view career breaks not as obstacles but as opportunities and encourage everyone, without hesitation, to apply. Through our Global Returners program, we provide support to professionals seeking to re-enter the workforce after an extended absence, be it for family care, parental leave, national service, sabbatical, or starting their own venture.
Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.
We take pride in being a Disability Confident Employer. If you need any reasonable adjustments or accommodations to be made during the recruitment process to support you performing at your best, please inform the recruitment partner who will be in touch should your profile be selected for the role you applied for. We are wholeheartedly committed to optimising your prospects of success by making suitable arrangements so that you may showcase your full potential.