Regional Cybersecurity Lead - Insurance

Job Description:

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Learn more on dxc.com.

About the role

DXC's Insurance Software & BPS business runs core insurance platforms and SaaS solutions for leading insurers across Asia Pacific. We're looking for a Regional Cybersecurity Lead to own security across our APAC customer base. This is a client-facing leadership role. You'll shape security commitments in contracts, keep security controls strong at every stage of a customer environment, and lead remediation and incident response across the region. Insurance industry solutions | DXC Technology

What you'll do

• Lead security in client engagements. Act as the regional security partner to client CISOs, and lead DXC's position on security and compliance schedules with Legal.
• Approve go-live. Sign off security acceptance before any customer environment goes live, based on evidence. Run a formal exception process for any gaps.
• Own vulnerability management. Run scanning, penetration testing and remediation SLAs for Critical and High findings, and report results to clients.
• Enforce core controls. Cover identity and MFA, network segmentation, encryption, secrets management, patching, and port registration.
• Lead incident response. Manage regional security incidents and customer notifications in line with contract and regulatory terms.
• Report on security posture. Give leadership clear metrics on security performance across the region.

What you'll bring

• 10+ years in cybersecurity, including 5+ years in regional or client-facing leadership.
• Experience negotiating security terms in outsourcing or SaaS contracts.
• Strong cloud security skills (AWS essential, Azure an advantage), plus IAM, vulnerability and secrets management.
• Knowledge of APAC financial-services regulation, such as MAS TRM, APRA CPS 234, HKMA and OJK.
• Familiarity with ISO 27001, NIST CSF and SOC 2.
• CISSP or CISM required. CCSP or OSCP desirable.
• Insurance or financial-services experience strongly preferred.

How you work

• You hold firm on controls and stay practical about delivery.
• You raise risk early.
• You're credible with clients at C-level.
• You decide based on evidence and hold teams to their commitments.

Why DXC
You'll lead security for mission-critical insurance platforms across the region, with real scope to shape how security is built into delivery.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.