APAC TSO Hub Cybersecurity Lead

Team: APAC TSO Hub

Function: Digital & Technology (D&T;)

Job location: Hyderabad

1. Job Purpose The APAC TSO Hub Cybersecurity Lead is responsible for managing cybersecurity risks, implementing global security standards, and protecting HEINEKEN’s systems, data and technology operations across the APAC region.

The role leads and develops the regional cybersecurity team, works closely with business and technology leaders, Global Information security team and ensures that HEINEKEN’s security requirements are applied in line with local regulations and business needs.

The role also coordinates cybersecurity incident response and serves as a key security contact for HEINEKEN businesses across APAC.

2. Key Responsibilities

Team Leadership

- Lead, coach and develop the APAC cybersecurity team.
- Coordinate security activities across regional technology teams and businesses.

Security Standards and Compliance

- Implement HEINEKEN’s cybersecurity policies and standards across APAC.
- Ensure compliance with relevant local regulations and company requirements.
- Work with Global Information Security teams to address regional security needs.
- Ensure the Global Security key indicator thresholds are reached

Risk Management and Security Controls

- Assess cybersecurity risks for new systems, projects and technology changes.
- Review and approve regional security requests and identify non-compliant solutions.
- Monitor security controls, support audits and ensure identified issues are resolved on time.
- Develop and track action plans to reduce security risks.
- Identify regional areas for improvement in relation to the Cyber agenda

Cybersecurity Incident Management

- Be the central point of contact between the Global security teams responsible for coordination and management of Cyber Security incidents and the Operating Companies of HEINEKEN.
- Ensure identified security vulnerabilities are addressed. Identification and priorization of vulnerabilities resides with the Global Information Security team,



whereas remediation with local asset owners.
- Support security investigations when required.

Technology and Operational Security

- Provide security guidance based on Global Security policies for IT systems, networks and industrial control systems used in production.
- Support effective security practices, including system updates, vulnerability management and access controls.
- Work with technology teams to integrate security requirements into new and existing solutions.

Security Awareness

- Support delivery of global cybersecurity awareness training activities tailored to APAC business needs. Drive their completion.
- Promote good security practices across regional teams.

Planning and Reporting

- Develop regional cybersecurity improvement plans and coordinate required resources and budgets.
- Report key security risks, incidents, compliance gaps and improvement progress to regional management and Global Information Security teams.

How: Leadership Expectations Deliver - play to win and celebrate success + deliver the goods: Essential

Shape – think consumers first + make courages moves: Crucial

Connect – champion a culture of belonging + learn, share and reapply: Essential

Develop – have real conversations – embrace learning & growth: Applicable

Communicative skills

- Manages relationships with stakeholders with conflicting interests, therefore needs excellent communication skills (both verbal and in writing),
- This role operationally is the glue between business stakeholders; often senior ones and technical roles in GIS

Other skills

- Has a deep understanding of the business and the importance of creating value for the business and the customer




- Ability to work collaboratively with others and navigate complex decision making
- Experience with working in an Agile workplace

Required work experience

- 10+ years of experience in the field of PMO and IT
- Minimum of 8 years in the field of cybersecurity
- Extensive understanding of the HEINEKEN D&T; organisation

Functional competenties

- Business Analysis, Ability to distil voice of the customer and converting this into initiatives
- Project Management, strategic planning and resource management
- Bachelor’s / Master’s degree in computer science, software engineering or network design.
- Qualification in at least some of the following qualifications or their equivalent, CISSP, CISM, ISSMP, CISA, CIA, CSTA, CSTP, CIIP, CFIP, CSIS, CMI, CWSA
- More than 5 years of working in the Cybersecurity / IT Audit field and previous experience working as Cybersecurity Officer / Manager,
- Able to identify and drive opportunities to increase the efficiency of information security.
- Has knowledge and worked with standards such as NIST, ISO2700, IEC62443,
- Has sound experience with Business Impact and Security Assessments.
- Be a Cybersecurity ambassador by supporting, informing, and communicating Information Security & Risk requirements to the Product Teams and Global Functions.
- Ability to explain Cybersecurity governance and its processes to business stakeholders.
- Demonstrated ability to recognize problems, identify possible causes and resolve problems.
- Ability to work and team with a multitude of different people and different cultures (as appropriate).
- Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
- Strong analytic and reporting skills.
- Demonstrated ability to write reports, procedures, policies, and communicate effectively in a variety of situations.
- Demonstrated ability to establish and maintain effective working relationships with internal and external organizations, teams, and individuals.

📌 Hub Cyber Security lead (Hyderabad)
🏢 HireFlex
📍 Hyderabad