Regional Cybersecurity Manager & Acting DPO

Role Overview

Bluebell Group is seeking a highly skilled and resilient Regional Cybersecurity Manager to lead our information security strategy and act as the Group’s Data Protection Officer (DPO). Reporting directly to the Head of Cyber Security & IT Infrastructure, this dual-hatted role is critical to safeguarding our digital ecosystem across all our Asian markets.

The successful candidate will drive our transition into modern, Zero Trust architecture leveraging the Microsoft Security ecosystem, manage our external Security Operations Center (SOC), and ensure rigorous compliance with regional data privacy regulations.

Please note: This is a highly hands-on, individual contributor position. You will be the primary driver of both high-level strategy and ground-level technical execution, operating without a dedicated subordinate headcount. We are looking for a practitioner who is just as comfortable writing compliance policies as they are configuring firewall rules and investigating endpoint alerts.

Key Responsibilities:

Hands-on Cybersecurity Operations:

• Directly oversee the deployment, administration, and optimization of our Microsoft security stack, including identity management, endpoint protection (XDR), device management, and data loss prevention (DLP) tools.

• Act as the primary technical liaison managing our external 24x7 Security Operations Center (SOC), ensuring SLA adherence, rapid incident triage, and effective threat hunting.

• Personally conduct regular vulnerability assessments, coordinate penetration testing, and execute patch management processes across the regional infrastructure.

• Serve as the primary incident responder for internal escalations, actively investigating and remediating potential security breaches.

Acting Data Protection Officer (DPO) & Compliance:

• Serve as the Group's subject matter expert on data privacy and cybersecurity regulations across all Asian markets where Bluebell operates.

• Crucial Focus: Maintain a deep, actionable understanding of the stringent data security, cross-border transfer, and privacy regulations specific to all Bluebell markets.

• Lead the creation, implementation, and automated enforcement (via DLP tools) of the Group Data Retention Policy across customer and employee HR data.

• Act as the primary point of contact for regional data privacy regulatory bodies and manage statutory breach notification protocols if required.

Governance, Risk & Compliance (GRC):

• Develop, maintain, and actively enforce comprehensive IT security policies, standard operating procedures (SOPs), and incident response playbooks.

• Design and conduct security awareness training for corporate staff and retail employees across the region.

Qualifications & Requirements:

• Experience: 5-8 years of dedicated experience in cybersecurity operations, incident response, and IT governance.

• Technical Proficiency: Deep, hands-on administrative experience with modern cloud security architectures, specifically the Microsoft Security stack (Purview, Defender, Entra ID) and Endpoint Detection and Response (EDR/XDR) platforms.

• Regulatory Knowledge: Strong understanding of the broader Asian data privacy and cybersecurity regulatory landscape. Demonstrated, practical expertise navigating compliance and data protection laws in China and South Korea is highly prioritized.

• Certifications: Industry-recognized security certifications (e.g., CISSP, CISM, CISA) are required. Privacy certifications are a major plus.

• Execution Focus: Proven ability to operate effectively as a standalone individual contributor, demonstrating a "roll-up-your-sleeves" mentality to independently execute technical and administrative tasks.

• Languages: Fluent in business English (verbal and written) for regional collaboration. Fluency in Mandarin, Korean, or Japanese is highly advantageous for localized regulatory compliance.

• Stakeholder Management & Influencing
• Communication & Problem Solving
• Crisis Management & Resilience
• Collaboration & Teamwork

Assistant Marketing Manager/Senior Marketing Executive – Mobility

Role Overview

The position supports the development and delivery of integrated marketing, branding and communications strategies across fuels, EV solutions, convenience retail and car care.

The role is accountable for delivering campaigns end to end, coordinating agencies and cross-functional stakeholders to ensure high-quality execution aligned with business objectives and Shell brand standards.

Responsibilities

Marketing Campaign Management

• Support planning and delivery of B2B and B2C marketing programmes, including acquisition, engagement, loyalty and cross-sell initiatives.
• Lead go-to-market and integrated marketing campaigns, managing end-to-end delivery across internal and external stakeholders (timelines, budget, materials and performance tracking).
• Review campaign outcomes, generate insights, and propose optimisation actions.

Events & PR Management

• Plan and deliver marketing events, launches and promotional activations.
• Partner with PR agencies to deliver media engagement, press materials and brand communications.
• Lead on-site execution, ensuring compliance with brand, safety and operational standards.

Agency & Stakeholder Leadership

• Manage creative, media, digital and PR agencies to drive quality output, on-time delivery and clear accountability.
• Partner with Sales, Operations, Procurement, Safety and Finance to align marketing activity with business priorities and operational readiness.
• Escalate and resolve issues quickly to maintain delivery momentum.

Marketing Planning & Governance

• Own and optimise Shell’s social media channels by managing the content calendar, messaging, tone of voice and performance.
• Oversee development of ATL materials, POSM and digital assets, ensuring brand consistency and quality.
• Manage budgets and forecasts, and support performance reporting and post-campaign reviews.
• Conduct market and competitor analysis and synthesize customer insights to inform planning and decisions.

Requirements

• Bachelor’s degree in Marketing, Business, Communications, or a related discipline.
• Typically 5–8 years’ relevant marketing experience, preferably within FMCG, commercial retail, mobility, automotive or EV environments.
• Demonstrated experience in managing integrated campaigns, events, and agency partners.
• Strong project management, prioritisation and delivery skills, with a commercial mindset and comfort operating in a matrix organisation.
• Strong stakeholder management skills across internal and external parties, with effective communication at all levels.
• A proactive, collaborative team player who can work independently and perform under pressure.
• Proficient in MS Office (Excel, PowerPoint, Word); experience with digital and data-driven marketing and applying AI tools in day-to-day work is an advantage.
• Excellent command of English and Chinese; Cantonese is required, Mandarin is an advantage.