Director – Global Cybersecurity

Responsibilities: Define and implement the global–regional cybersecurity operating model, including decision rights, responsibilities, escalation thresholds and functional coordination across regions and countries.

Develop the Group’s target security architecture and implementation roadmap covering network segmentation, zero-trust access, endpoint and workload protection, email and web security, cloud security and secrets management.

Establish and enforce consistent global security-control baselines across critical systems, operating entities and privileged-access environments, with formal exception and risk-acceptance processes.

Provide technical security oversight for new platforms, system integrations, cloud migrations and digital initiatives, ensuring security requirements are incorporated throughout the technology-delivery lifecycle.

Lead the Group’s vulnerability and exposure-management programme, including asset discovery, vulnerability scanning, risk-based prioritisation, patching standards and external attack-surface reduction.

Oversee threat detection and security operations, including SIEM and EDR engineering, detection-rule development, alert triage, threat hunting, threat intelligence and the performance of the managed Security Operations Centre.

Establish and lead a wide Cybersecurity Incident Response Team with a common playbook, command structure, severity classification, escalation process and follow-the-sun response capability.

Serve as Incident Commander for material cybersecurity incidents, coordinating containment, recovery, forensic investigation, executive decision-making and regulatory, customer and stakeholder communications.

Strengthen cyber resilience by establishing immutable and segregated backup standards, testing recovery times for critical platforms and developing manual operational fallbacks for major system outages. Develop and implement security controls for operational technology and logistics systems, including warehouse systems,