ABB
Regional InfoSec and GRC Leader
China · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerABB
- LocationChina
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
At ABB, we help industries outrun - leaner and cleaner. Here, progress is an expectation - for you, your team, and the world. As a global market leader, we’ll give you what you need to make it happen. It won’t always be easy, growing takes grit. But at ABB, you’ll never run alone. Run what runs the world.
This role sits within ABB's Robotics business, a leading global robotics company. We're entering an exciting new chapter as we’ve announced the plan for SoftBank Group to acquire ABB Robotics. SoftBank is a globally recognized technology group and investor/operator focused on AI, robotics, and next-generation computing. By joining us now, you’ll be part of a pioneering team shaping the future of robotics—working alongside world-class experts in a fast-moving, innovation-driven environment.
This Position reports to:
IS Manager
Your Role:
The Regional Information Security Lead is the single accountable InfoSec representative in the region, responsible for executing the global security program locally, embedding security into regional IT and business operations, and acting as the first escalation point for security risks and incidents.
Show full description
The role bridges central InfoSec strategy and regional execution, ensuring global standards are applied pragmatically while respecting local constraints.
Key responsibilities:
Regional Security Governance & Risk Ownership
- Act as the regional owner of information security execution
- Maintain regional risk register inputs, exceptions, and remediation plans
- Ensure alignment with global ISMS, policies, and standards, within the given scope
- Ensure regional compliance with security and compliance requirements defined by central InfoSec, within the given scope
- Ensure compliance with local security and compliance regulations
- Represent InfoSec in regional governance forums and project reviews
- Identify and escalate regional IT and security risks to central
Security Enablement & Technical Execution (Hands-on)
- Support and coordinate implementation of security controls across:
- Endpoints / Digital Workplace (with central Workplace & outsourcer)
- Local infrastructure and cloud workloads
- Network security controls (segmentation, NAC, firewall coordination)
- Application owned/managed by Robotics, within the region
- Provide regional L2/L3 security support for Incidents and compliance related issues
- Support rollout of central security platforms
Incident & Crisis Coordination (Regional)
- Act as the regional incident coordinator for security events
- Ensure local containment actions are executed quickly
- Ensure evidence collection in line with the global guidelines, where needed
- Coordinate regional stakeholders (IT, workplace, facilities, business)
- Interface with central SecOps / IR lead for investigation and response
- Drive post-incident remediation and lessons learned locally
Compliance, Audit & Supplier Security (Regional Liaison)
- Coordinate regional audit evidence collection, site assessments, and remediation actions
- Track remediation of audit findings and compliance gaps
- Support regional third-party / supplier / customer security assessments
- Ensure exceptions are time-bound and reviewed
- Assist on Cyber Security assessments for NIS 2 relevant legal entities within the region (and equivalent in non-EU countries)
Business & IT Security Partnering
- Act as the trusted security advisor to regional business and IT leads
- Support regional projects and changes with security input
- Promote secure working practices for employees and contractors
- Drive awareness of secure collaboration and data handling
Key Requirements:
- 4–7 years of experience in cybersecurity
- Knowledge of local regulations (e.g. China Cyber Security Law, NIS 2) for the region in scope is mandatory
- Knowledge of ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK, OWASP, TISAX, and SOX
- Familiarity with security technologies such as firewalls, WAF, SIEM, IAM, DLP, endpoint protection, and cloud security
- Relevant certifications: CISSP, CISM, cloud security, ITIL Foundation
We value people from different backgrounds. Could this be your story? Apply today or visit www.abb.com to read more about us and learn about the impact of our solutions across the globe.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked