Kering Cybersecurity Project Manager, Greater China

In the context of a job creation which is aligned with the overall strategy to reinforce Cybersecurity posture, we look for an experienced Cybersecurity Project Manager who has a strong background in cybersecurity compliance, regulatory engagement, and security project management in the Greater China region.

Responsibilities

Drive cybersecurity compliance initiatives across all Greater China brands with Gucci as the primary focus, including but not limited to Multi-Level Protection Scheme (MLPS), Mini Program compliance, AI Security compliance, and Cybersecurity Compliance regulations. Ensure timely alignment with regulatory requirements and local cybersecurity laws.; Collaborate with local regulators to implement new cybersecurity policies and regulations, ensuring all Greater China brands, with a primary focus on Gucci, meet the evolving compliance requirements in a timely manner.; Implement and enforce group cybersecurity policies and standards across Greater China brands, adapting global security frameworks to local requirements while maintaining alignment with Kering Group strategy.; Work closely with the CSIRT team to coordinate vulnerability remediation efforts, ensuring timely identification, tracking, and closure of security vulnerabilities.; Support the APAC Cybersecurity Program Manager in executing Cybersecurity projects, including Compliance assessment, security assessments (e.g, Vendor security, Cloud security, AI security etc.), penetration testing programs, and across the region.; Provide regular cybersecurity status reports and updates to relevant stakeholders, including brand leadership, headquarter Cybersecurity teams, and local management teams on security posture, compliance status, and risk indicators.; Act as the Greater China point of contact for Group Cybersecurity initiatives, collaborating with the Gucci teams, Cybersecurity teams to drive and coordinate projects and operation across the region.; Monitor and assess emerging cybersecurity risks and regulatory changes in the Greater China region, providing proactive recommendations to mitigate potential security and compliance risks.

Requirements

Bachelor's degree or higher in computer science, cybersecurity, or a related area; Fluent in English and Mandarin Chinese, with excellent written and verbal communication skills to effectively engage with both local and international stakeholders; 6+ years' experience in cybersecurity compliance, security project management, or similar roles within global, Fortune 500 organizations or similar high-scale, multinational environments; 4+ years of hands-on experience in cybersecurity compliance projects such as MLPS, Security assessments, Mini Program compliance, or regulatory-driven security initiatives in Mainland China, Hongkong, Macao and Taiwan; Strong understanding of China cybersecurity regulatory landscape, including MLPS, Data Security Law, PIPL, and industry-specific compliance requirements; Excellent communication and interpersonal skills with the ability to effectively engage and influence stakeholders at all levels across brands and functions; Self-driven with strong risk awareness and the ability to proactively identify and address security compliance gaps

Nice to have

Professional certifications such as CISP, CISSP, CISA, or equivalent are a plus; Experience working in cross-functional teams in a matrix organization is highly desirable