Regional Manager, Business Security

Location: Singapore, Singapore

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales established its presence in Singapore in 1973 to support the expansion of aerospace-related activities in the Asia-Pacific region. Throughout the last four decades, the company grew from strength to strength and is today involved in the primary businesses of Aerospace (including Air Traffic Management), Defence & Security, Ground Transportation and Digital Identity & Security. Thales today employs over 2,100 people in Singapore across all its business areas.

**Responsibilities**:

- Reporting to Asia CDI Security Director is responsible & accountable for Security Governance and Oversight for Thales DIS Asia Business, R&D and Outsourced activities (Manuf / SW Dev etc).
- Ensure that site security processes and procedures are setup and operated in accordance with Corporate and Site Security Polices & requirements.
- Support as needed site security management on all aspects of personnel, physical, production and IT security at the various card, secured documents production and personalization sites within the region responsible.
- Acting in accordance with the Corporate Security Management System and Policy to support the related site security management on all aspects of personnel, physical, logical, IT security at all Asia R&D / Outsource Manuf activities.
- Ensure the oversight of information security for the related sites in Asia region are in accordance to required org security requirements and compliance to applicable certification and regulatory requirements.
- Serves as a SME for the related stakeholders in Asia region in regard to any security queries, issues and provide appropriate solutions in line with the required compliance and risk level
- Support the sites in obtaining accreditation and then ensure ongoing compliance with the security regulatory requirements in respect for business / R&D security activities as per applicable standards such (CC/EMVCo, ISO27001, GSM-SAS etc).
- ** Cloud Platform Expertise**: Deep understanding of security best practices and native security services within major cloud platforms (e.g., AWS, Azure, GCP). Specify which platforms are most relevant to your organization.
- Serverless Security: Awareness of the unique security challenges and best practices associated with serverless computing (e.g., AWS Lambda, Azure Functions).
- Cloud Data Security: Expertise in implementing data loss prevention (DLP), encryption at rest and in transit, data masking, and other data security controls specific to cloud storage and databases.
- Perform Risk Assessment and regular audits for both internal and external stakeholders as per Accreditation or Corporate Standards and recommend and verify the implementation of solutions/controls.
- Ensure that Security risks and issues are appropriately managed in a measurable way and in accordance with Corporate policies and customer requirements
- Develop and maintain the Site Security Management System (SMS) to fulfill the regulatory requirements and ensure all Security KPI compliance to ensure & achieve desired level of security for Sites & Business Activities.
- Provide inputs and recommendations to management and take necessary steps to propose the security controls needed to protect information and assets as well as all business data and information of customers and partners.
- Act as the Tactical Process Manager between personnel responsible for security and organizational leaders to help organization achieve its strategic security objectives.
- Formulate security audit plan with Asia Security Director and perform internal cross-site audits in Asia region to ensure that controls and audit trials are in place to protect company assets.
- Monitor all security activities (Logical & Physical) and advice the management team on all matters concerning card/secured documents production security, IT system security as well as outsourced activities.
- To work with all business owners and departments to ensure the security requirements and deployment of security framework in all production sites as well as outsourced manufacturing activities.
- Lead and manage the investigation of any security breaches that has significantly impact to the business.
- Any other special projects as specified, as and when required.

The job holder shall always during the employment with the company, respect and comply with the Quality, Health, Safety, Environmental & Securit