About You
The VP, ITSO & CYBERSECURITY is a dual-function executive responsible for the stability, service delivery, and security posture of Carsome Group. This role oversees Corporate IT, Service Desk (IT Services), Infrastructure, System Network, System Engineer, Incident Problem and Change Management and Cybersecurity while simultaneously leading the strategic implementation of cybersecurity frameworks to protect the business and its subsidiaries.
Your Day-to-Day:
1. Corporate IT, Service Desk (IT Services), Infrastructure, System Network, System Engineer, Incident Problem and Change Management
- Technology Service Desk: Lead the Single Point of Contact (SPOC) centre to manage technical support, incidents, and application requests.
- Corporate IT & Infrastructure: Oversee physical IT infrastructure efficiency, including servers, networks, security, asset management, and cloud readiness (local and cloud servers).
- Incident, Problem & Change Management: Manage the service lifecycle through ITIL-based IPC processes to ensure traceability and collaboration.
- Project & Administration: Centralize IT project coordination and purchasing to deliver audit-proof administration.
2. Cybersecurity Leadership & Strategy
- Security Custodian: Act as the primary custodian for cybersecurity, building and monitoring strategies and blueprints tailored to the business model.
- Risk Management: Align and advise on the Group's risk, detect, identify, and manage information security risks.
- Defensive Implementation: Build and implement security processes and procedures to protect against and respond to risks.
- Stakeholder & Regulatory Engagement: GIA (Group Internal Audit), KPMG, govern compliance with Information Security Policies (ISP) and legal/regulatory frameworks (e.g., SOX) while reporting status to C-level executives.
3. Strategy, Compliance & Innovation
- SOX Framework: Maintain a SOX-compliant ITSO Framework, including policies for Access Management, Disaster Recovery, and Securing Infrastructure.
- Continuous Improvement: Drive innovation through Single Sign-On (SSO) implementation, Zero Trust Network (ZTNA) redesign, and network BCP implementation.
- Financial Management and Cost Efficiency: Forecast and manage combined CAPEX and OPEX budgets, optimizing investments based on risk and operational needs.
- Drive group synergy to reduce workforce and operational costs through shared services and contract consolidation.
4. Team Management
- Leadership: Empower and grow high-performing teams, establishing clear KPIs, responsibilities, and up-skilling activities.
- Operating Network: Manage relationships with key external partners such as G-Asiapac (G-Suite), Softline (Azure), and various cybersecurity bodies (ISO, ISACA, etc.)
- Responsible for the live technology operations and acting as the gatekeeper for the implementation of change onto the live environments, overseeing go/no-go decisions and deployment communications.
Your Know-How
- Bachelor’s or Master’s Degree in Information Technology, Computer Science, or a relevant field.
- Solid leadership and experience in IT Operations which include Corporate IT, Service Desk (IT Services), Infrastructure, System Network, System Engineer, Incident Problem and Change Management and Cybersecurity.
- Empowering leadership style, supportive with those learning and with sufficient controls to ensure progress is assured with the team and outsourced suppliers and partners.
- Excellent team player, flexible, responsive, takes ownership and can work on the details in a real time environment that requires out of hours work as necessary.
- Have demonstrable experience in defining, delivering and running IT operational services in a multi-site organization with in excess of number of sites and for all employees.
- Experience in leading teams and suppliers to transform IT services to deliver excellent service and better value for money.
- Experience is running supplier bid and selection processes on trading critical services.
- Demonstrable experience in applying ITIL principles in pragmatic and creative ways that deliver real results.
- Be familiar with defining, sourcing, deploying and supporting technologies in consumer centric businesses including retail technologies, data communications, web and mobile technologies.
- Ability to prioritize a varied workload, understanding impact of services on the business.
- Problem solving skills and resilience to issues and influences outside of his/her control