Korea Chief Information Security Officer

Summary

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish.

Description

In this role, you will serve as Apple's primary security leader in Korea, responsible for translating the company's global security strategy into locally compliant programs that meet Korean regulatory and legal requirements. This role represents Apple's security posture externally — engaging government officials, regulators, national cybersecurity agencies, and law enforcement — and leads in-country incident response in alignment with national notification and reporting obligations.

You will build the trusted relationships necessary to serve as an effective bridge between Apple's global security organization and our in-country business partners, regulators, and government stakeholders, serving as the authoritative in-country voice on security compliance and regulatory readiness.

The role requires the ability to operate across distributed, multi-entity environments and to communicate effectively with regulatory bodies, business leadership, and technical teams.

Responsibilities

Serve as the company's in-country security leader: Represent the security point of view at company-sponsored events, Executive Briefing Centers, executive field visits with customers, and partner forums. Cultivate trusted relationships government officials including regulators, national cybersecurity agencies, and law enforcement bodies; actively shape public policy , and the regulatory dialogue on data protection, and cyber resilience on behalf of the company.

Lead the company's global incident response program in-country: Translate global frameworks, playbooks, and capabilities into locally compliant procedures that meet national regulatory notification, reporting, and escalation requirements. Serve as the primary in-country liaison to regulators and national cybersecurity agencies during incidents; and extend incident response support and coordination across the broader region, ensuring consistent readiness and response posture.

Partner with global risk, legal, and compliance teams to drive in-country regulatory compliance: Navigate local data protection, cybersecurity , and sector-specific frameworks and support certification and audit processes that satisfy national requirements. Serve as the authoritative in-country voice on security compliance. Conduct security risk assessments and drive solutions to address identified risks. Support in region security training.

Minimum Qualifications

10+ years experience in information technology or information protection field
Experience in navigating complex distributed operations involving multiple legal entities, security teams, regulatory frameworks, and operational environments
Strong knowledge of Korean and regional compliance and regulatory frameworks
Experience supporting Board-level security governance and executive stakeholder management
Strong communication skills adaptable for regulatory bodies, business leadership, and technical teams
Excellent communications skills in English and Korean

Preferred Qualifications

Professional certifications in European compliance and/or information security (CISSP , CISM)
Direct experience with regulatory program implementation
Previous experience supporting complex international operations
Knowledge of Apple business operations or multinational corporate structures
Has a Master’s degree or higher in the field of information protection or information technology. OR has a Bachelor’s degree in the field of information protection or information technology and at least 3 years experience in the relevant field
Licensed as an Information Security Management System (ISMS) examiner
4 years of experience in the field of information protection; or 5 years of experience in the field of information technology and information protection (of the five years, at least two years experience in the field of information protection).