Information Security Program Manager

As Fisher Investments continues to grow globally, cybersecurity must remain aligned with our goals, regulatory obligations, and operational priorities. That's where our Information Security Business Engagement team comes in. Our mission is to bridge the gap between cybersecurity and the business, helping leaders make informed, risk-based decisions while supporting secure business growth. If you're passionate about building relationships, influencing stakeholders, and translating cyber risk into business value, we'd like to talk with you.

As Regional Business Information Security Officer (BISO) - APAC you will serve as a Program Manager and the primary cybersecurity-business partner across Australia, Japan, Singapore, and other Asia-Pacific operations. You will report to the Information Security Vice President and work closely with regional leadership, Technology, Legal, Compliance, Privacy, Risk, and Information Security teams to translate global security strategy into regional execution.

You will provide cyber risk guidance, support regulatory alignment, and help drive cybersecurity maturity throughout APAC.

• Serve as the regional cybersecurity advisor and trusted partner to APAC business and technology leadership.
• Translate global Information Security strategy, policies, and priorities into regionally relevant business and operational practices.
• Represent regional business considerations and cybersecurity needs within global Information Security initiatives.
• Support regional cybersecurity governance, regulatory alignment, and stakeholder engagement.
• Partner with Legal, Compliance, Privacy, Risk, and Technology teams to understand and address regulatory and cybersecurity requirements.
• Support audits, regulatory reviews, assessments, and governance activities impacting APAC entities.
• Provide regional cyber risk oversight and business engagement support.
• Maintain visibility into regional cyber risks, remediation efforts, emerging threats, and control gaps.
• Review and communicate cybersecurity risks and trends to business leadership and Global Information Security teams.
• Act as a security advisor for business initiatives and technology transformation efforts.
• Support secure adoption of new technologies, cloud services, third-party relationships, and Artificial Intelligence initiatives.
• Connect business stakeholders with Information Security subject matter experts and resources.
• Support regional cyber incident readiness and security culture initiatives.
• Participate in tabletop exercises, readiness planning, and resilience activities.
• Coordinate stakeholder engagement during cybersecurity incidents while partnering with operational response teams.
• Support Information Security awareness and training efforts across APAC business units.
• Develop executive reporting, cybersecurity metrics, and regional security insights.
• Communicate cyber risk, security trends, and business impacts in a manner relevant to executive leadership.
• Contribute to regional and global cybersecurity reporting and dashboard initiatives.

• 8+ years of experience in Information Security, Cyber Risk, Technology Risk, Governance, Risk & Compliance (GRC), or related disciplines.
• Experience working across multiple countries, regions, or business units within a regulated environment.
• Strong understanding of cybersecurity governance, cyber risk management, and security control frameworks.
• Experience translating technical cybersecurity topics into clear business-focused recommendations.
• Experience engaging senior business leaders, regulators, auditors, and cross-functional stakeholders.
• Working knowledge of cybersecurity and technology-related regulatory requirements within APAC jurisdictions.