Vice President Security Risk and Resilience (APAC)

COMPANY OVERVIEW STACK Infrastructure builds, owns, and operates hyperscale and colocation data centers that power the world’s most ambitious technology companies. With a rapidly expanding footprint across APAC, STACK combines deep development expertise, flexible capital, and operational discipline to deliver critical digital infrastructure at scale. Our clients include the largest hyperscale cloud platforms. We are building a regional platform defined by speed of delivery, power reliability, and long-term partnership — and we are assembling the team to lead that effort. SUMMARY/OBJECTIVE The Vice President Security Risk and Resilience leads the security, enterprise risk management, business continuity, operational resilience, crisis management and assurance functions across APAC Critical Operations. The role is accountable for protecting people, customers, assets, information and operations by establishing the governance, standards and resilience frameworks required to support a safe, secure, reliable and scalable Critical Operations organisation. The Vice President directly leads and develops Site Security Managers across APAC, providing clear regional direction and ensuring consistent security leadership, customer service, compliance, incident response and performance standards across STACK sites. The Vice President serves as the independent control and assurance function for APAC Critical Operations, ensuring the organisation can scale while maintaining an appropriate risk posture, regulatory compliance and operational resilience. As a core member of the APAC Critical Operations Leadership Team, the role shares accountability for customer success, operational continuity, business resilience and organisational performance. Security is a visible leader of the customer experience. The Vice President sets the expectation that security controls, customer assurance, audits, incident handling and security-related engagements are delivered with urgency, professionalism, transparency and a strong service mindset, protecting customers and the platform while building trust and minimising unnecessary friction. This role directly supports STACK’s commitment to 100% uptime and a concierge-level customer service experience, ensuring risk is proactively managed, planned works are executed safely, and customer communications are clear, timely and professional. ESSENTIAL FUNCTIONS LEADERSHIP AND WAYS OF WORKING • Lead, coach and hold accountable Site Security Managers across APAC, ensuring consistent security standards, strong customer service, effective incident response and disciplined execution across sites. • Act as a core member of the APAC Critical Operations Leadership Team, providing independent challenge, clear risk advice and practical solutions that enable safe and sustainable growth. • Partner with VP Critical Site Operations APAC so that Security, Risk & Resilience establishes the framework and provides assurance while Operations owns day-to-day execution and operational performance. • Partner with Customer Success to maintain customer confidence through transparent, secure and resilient operations, with joint accountability for customer trust, security-related escalations, compliance outcomes and service continuity assurance. • Partner with Operational Excellence to integrate risk and resilience into operational standards, playbooks, readiness frameworks and governance processes. • Partner with Operational Systems to set technology risk, access governance, data governance and systems resilience requirements for CMMS, DCIM, BMS, operational technology and reporting platforms. • Partner with Commercial, Contracts and Operations Procurement on supplier risk frameworks, critical supplier assessments, continuity requirements, security obligations and third-party assurance. • Partner with Engineering & Design to embed security, resilience, maintainability and continuity requirements into facility design and lifecycle planning. • Partner with Delivery to ensure new facilities are handed over with appropriate security readiness, resilience assessment, continuity planning and operational risk controls. • Communicate clearly with executives, customers and cross-functional leaders, translating security, risk and resilience issues into business impact, decisions and accountable actions. DIRECT REPORTS • Provide direct leadership, performance management and capability development for Site Security Managers across APAC, ensuring consistent site execution of the Security, Risk and Resilience framework. COMPETENCIES • Executive leadership across physical security, enterprise risk, operational resilience, business continuity, crisis management and assurance. • Strong customer-service orientation with the ability to lead security as a trusted, responsive and professional customer-facing function. • Sound judgement and independence in balancing customer needs, operational requirements, business growth and risk exposure. • Strong physical security governance capability across access control, CCTV, guarding, site security frameworks and security risk assessment. • Ability to lead crisis preparedness and executive response in high-consequence, 24/7 mission-critical environments. • Strong executive communication, stakeholder influence and ability to provide constructive challenge across senior leadership teams. • Demonstrated capability in regulatory readiness, compliance assurance, control validation and audit governance. • Strong third-party and supplier risk management capability, including continuity and assurance requirements. • Data-driven approach to security, risk and resilience reporting, metrics, trend analysis and continuous improvement. • Ability to operate effectively across multiple countries, cultures, customer requirements and regulatory environments in APAC. SUCCESS MEASURES • Security and customer outcomes will be measured through security incident frequency, security compliance scores, customer security audit results, physical security assessment scores, critical vulnerability closure rates, customer trust measures, customer audit performance, security escalation resolution and service continuity outcomes. • Risk performance will be measured through overall enterprise risk exposure, completion of risk treatment actions, demonstrable reduction of critical risks and timely completion of scheduled risk reviews. • Resilience performance will be assessed through business continuity readiness, crisis exercise performance, recovery readiness scores and the demonstrated effectiveness of continuity plans. • Assurance, compliance and supplier resilience will be measured through audit performance, regulatory compliance, closure of assurance findings, third-party compliance rates, critical supplier risk ratings, supplier continuity compliance, supplier recovery readiness and completion of third-party assurance activities. PREFERRED EDUCATION AND EXPERIENCE • Extensive senior leadership experience across security, enterprise risk, business continuity, operational resilience, crisis management and/or assurance in complex mission-critical, infrastructure or similarly high-consequence environments. • Demonstrated experience leading regional or multi-site security, risk or resilience programs across multiple jurisdictions and stakeholder groups. • Proven customer-facing experience supporting security assurance, customer audits, compliance requirements, security escalations and executive customer engagement. • Strong experience with physical security governance, including access control, CCTV, guarding, security risk assessment and assurance programs. • Experience establishing enterprise or operational risk frameworks, risk registers, treatment programs, risk reporting and emerging-risk monitoring. • Experience designing and exercising business continuity, crisis management and emergency preparedness frameworks. • Experience with third-party risk, critical supplier resilience, contractual security requirements and supplier assurance. • Experience partnering with Operations, Customer Success, Engineering, Delivery, Commercial and technology teams to embed security and resilience into business decisions and facility lifecycle planning. WORK ENVIRONMENT / CONDITIONS • Regional executive role supporting 24/7 mission-critical operations across APAC. • The role may be required to provide executive leadership and coordination during significant incidents, emergencies or crises outside standard business hours. • Work includes engagement with operational facilities, customer environments, security teams, leadership forums, audits and resilience exercises. TRAVEL REQUIRED • Regional travel across APAC may be required to support facilities, customer engagements, audits, assurance activities, exercises and incident or crisis response. ADDITIONAL ELIGIBILITY REQUIREMENTS • Completion of STACK onboarding and required safety, security and compliance training. • Ability to satisfy site and customer access requirements across relevant APAC facilities. • Ongoing compliance with STACK policies, procedures, confidentiality obligations and behavioural standards. WORK AUTHORISATION/SECURITY CLEARANCE REQUIREMENTS • Legal entitlement to work in the role’s employing jurisdiction. • Ability to satisfy applicable pre-employment screening requirements, including right-to-work, background and reference checks. • Ability to meet data centre and customer security requirements, including badging, access control and any customer-mandated screening or clearance requirements. EQUAL OPPORTUNITY EMPLOYER STACK provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, colour, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by applicable federal, state or local laws. This policy applies to all terms and conditions of employment, including recruitment, hiring, placement, promotion, termination, redundancy, recall, transfer, leaves of absence, compensation and training. OTHER DUTIES Please note that this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the employee for this role. Duties, responsibilities and activities may change at any time with or without notice.