Chief Information Security Officer, Asia

Key Responsibilities Security Leadership and Governance Define and drive the information security strategy, governance framework, and roadmap for Asia, aligned with business priorities and Global HQ direction. Establish and maintain a clear regional security operating model, including roles, responsibilities, reporting, and escalation paths. Provide functional leadership of the function and collaborate with Market CISOs/Security Officers and/or market security champions across Asia. Lead regional security governance forums and provide regular reporting on risk, incidents, compliance, and remediation status. Risk, Controls, and Operations Oversight Oversee the regional security risk posture across infrastructure, applications, cloud, retail, digital platforms, data, and third parties. Ensure key security controls and services are effective across the region, including vulnerability management, identity and access management, endpoint and network security, monitoring, and data protection. Define and monitor security KPIs/KRIs, and escalate material risks and control gaps to the Asia CIO, Global CISO, and relevant business stakeholders. Review and challenge market-level risk acceptances, remediation plans, and control exceptions where required. Compliance, Audit, and Incident Management Ensure compliance with applicable cybersecurity, information security, privacy, and technology-related requirements across Asia markets. Act as the regional point of contact for internal and external audits, regulators, and relevant authorities on information security matters. Oversee security assessments, audits, and remediation of identified control gaps. Lead regional oversight of cybersecurity incidents, ensuring effective coordination, executive escalation, regulatory support, and post-incident follow-up. Ensure disaster recovery, cyber crisis, and business continuity plans are maintained and tested. Business, Project, and Third-Party Security Ensure security-by-design is embedded in major business and technology initiatives, including digital, CRM, retail, infrastructure, cloud, and data-related projects. Act as a key regional control owner and participate in technical architecture assessment to provide security oversight for major systems, deployments, and sensitive data use cases. Oversee third-party security risk management for critical vendors, service providers, and outsourced operations. Partner with Legal, Privacy, Digital, Retail, and IT teams to ensure coordinated management of security risks and obligations. Stakeholder Management and Collaboration Act as the key information security partner to Asia market leadership, Louis Vuitton Global HQ, and LVMH Group stakeholders on regional security matters. Build strong working relationships with Market CISOs, CIOs, business leaders, Legal, Privacy, Digital, CRM, Retail, Client Services, Internal Control, HR, Procurement, and IT teams to align security priorities with business needs. Collaborate closely with Louis Vuitton Global HQ and LVMH Group security teams to ensure regional requirements are represented and global policies, standards, and initiatives are effectively implemented across Asia. Represent Asia in relevant global and Group security governance forums, and communicate regional risks, regulatory developments, operational constraints, and investment priorities. Ensure effective coordination with external auditors, regulators, service providers, and other relevant partners on security, compliance, and incident-related matters.

Candidate Profile Significant leadership experience in information security, cybersecurity, or technology risk within a complex international environment. Strong experience in regional or multi-market security governance, ideally across Asia. Strong knowledge of cybersecurity frameworks and controls, including NIST, ISO 27001, CIS Controls, SIEM, IDS/IPS, DLP, encryption, IAM, vulnerability management, and cloud security. Demonstrated experience in security operations oversight, incident response, audit and regulatory engagement, and risk management. Strong executive communication, stakeholder management, and influencing skills in a matrix organization. Hands-on, analytical, and able to make sound risk-based decisions in a fast-paced environment. Qualifications Bachelor’s degree or above in computer science, information security, information systems, information technology, or a related field; and/or equivalent relevant professional experience. At least 10 years of experience in information security or information technology, including at least 5 years of direct experience in cybersecurity leadership roles. Relevant certifications such as CISSP, CISM, CISA, or equivalent are preferred.