APAC Cyber Security Compliance Manager

Conduct regular security risk assessments across APAC operations.

Identify vulnerabilities, threats, and emerging risks.

Develop and implement mitigation strategies and security controls.

Monitor compliance with applicable laws, regulations, customer requirements, and contractual obligations.

Support regional cybersecurity incident response activities.

Conduct post-incident reviews and lessons-learned exercises.

Drive continuous improvement initiatives to strengthen security resilience and reduce future risk.

Develop and deliver security awareness and education programs for employees, contractors, and third-party partners.

Foster a culture of security awareness across the organisation.

Communicate emerging threats, risks, and best practices to stakeholders.

Assess cybersecurity risks associated with vendors, suppliers, and business partners.

Perform security due diligence activities.

Collaborate with Procurement and Legal teams to ensure appropriate security obligations are embedded within contracts and agreements.

Develop security performance metrics and reporting frameworks.

Provide regular updates to the CISO organisation and business leadership on security posture, compliance activities, risks, and incidents.

Identify trends and opportunities for improvement through security reporting and analysis.

Coordinate and support internal and external security audits.

Manage remediation activities arising from audit findings.

Ensure ongoing compliance with regulatory, contractual, and organisational security requirements.

You are a seasoned cybersecurity professional with strong leadership capabilities and a passion for enabling secure business operations. You bring a strategic mindset, excellent stakeholder engagement skills, and a deep understanding of cybersecurity governance, risk, and compliance.

Strong knowledge of information security principles, technologies, and best practices.

Experience working with recognised security frameworks and standards, including: ISO 27001 NIST Cybersecurity Framework Australian Essential Eight Maturity Model Australian Information Security Manual (ISM) Defence Industry Security Program (DISP)

ISO 27001

NIST Cybersecurity Framework

Australian Essential Eight Maturity Model

Australian Information Security Manual (ISM)

Defence Industry Security Program (DISP)

Understanding of emerging cyber threats, attack vectors, and security trends.

At KBR, you'll have the opportunity to work on complex and meaningful projects while helping protect critical business operations across the APAC region. You'll be part of a global cybersecurity team, influence strategic security outcomes, and contribute to a culture that values innovation, collaboration, and continuous improvement.

#LI-DNP #LI-DNI #S-DNI