Cyber Security Unit Manager - Cyber, Risk & Assurance

Description

As Unit Manager for Cyber Risk & Assurance, you will lead H&M Group’s capabilities for cyber risk management, governance, compliance and assurance, playing a key role in strengthening the organisation’s security, resilience and ability to manage cyber risk in line with its risk appetite and regulatory obligations.

As a member of the Cyber Security Leadership Team reporting to the CISO, you will share accountability for the overall cyber security strategy, priorities and long-term development of the Cyber Security function. Working closely with leaders across business, technology and cyber security, you will help shape outcomes that balance business objectives, security needs and risk management across H&M Group.

You will provide strategic leadership for H&M Group’s Cyber Risk & Assurance capability, bringing together Cyber Security Frameworks, Supply Chain Security Risk and Security Control Assurance. Through your leadership, you will drive the continued evolution of cyber risk management and control assurance.

Responsibilities

• Lead the strategic direction, maturity and long-term development of H&M Group’s Cyber, Risk & Assurance capability, defining and evolving the strategy, roadmap and operating model in alignment with business, technology and cyber security objectives.
• Contribute as a member of the Cyber Security Leadership Team to the overall cyber security strategy, priorities and long-term capability development.
• Drive the continued development and maturity of the Information Security Management System (ISMS), including frameworks, policies and governance structures that enable consistent and effective management of cyber risk across H&M Group.
• Provide oversight and assurance of cyber security risks and controls, promoting transparency, accountability and effective risk-based decision-making.
• Strengthen H&M Group’s approach to security policy and compliance, regulatory requirements, security control assurance and governance reporting.
• Drive the continued development of third-party and supply chain security risk management, ensuring risks are identified, assessed and managed through effective governance and oversight.
• Lead budgeting, resource and investment planning, vendor strategy and prioritisation to support Cyber Risk & Assurance and wider cyber security objectives.
• Foster a high-performing, collaborative and inclusive culture focused on strong accountability, continuous improvement and business value.
• Leadership as a Unit Manager
• As a Unit Manager and member of the Cyber Security Leadership Team, you provide strategic leadership for your unit while contributing to the overall direction and development of the Cyber Security function. You develop high-performing leadership teams, drive organisational effectiveness and capability development. You demonstrate enterprise leadership by collaborating across the business, influencing senior stakeholders and supporting decisions that create value beyond your own unit.

Requirements

• We are looking for someone with:
• 8+ years of people management experience in cyber security, technology risk, governance, compliance, assurance or a closely related field.
• Proven experience leading enterprise-scale cyber risk, governance, compliance or assurance capabilities in a complex global organisation.
• Proven experience leading through managers and developing high-performing leadership teams, with accountability for a multidisciplinary organisation and its outcomes.
• Experience as a member of a senior cyber security, technology, risk or enterprise leadership team, contributing to shared strategy, priorities, investment decisions and organisational outcomes beyond your own area of responsibility.
• Strong knowledge of cyber security risk management, governance, compliance and assurance principles, methodologies and operating models.
• Strong knowledge of security frameworks, policies, standards and controls, and experience translating regulatory and internal requirements into effective security governance.
• Strong understanding of third-party and supply chain security risk management in complex global environments.
• Experience establishing meaningful cyber risk, governance and assurance metrics and translating risk and control information into clear business implications, priorities and decisions.
• Experience managing significant budgets, investments, resources, sourcing arrangements and external partners, including strategic vendor relationships.
• Excellent communication and influencing skills, with proven experience engaging senior and executive stakeholders and communicating complex cyber risk, regulatory and assurance topics in a clear and pragmatic way.
• Sound judgement and decision-making capability in complex, uncertain and risk-sensitive situations.
• Additional Information
• This is a fulltime permanent role based in Stockholm, Sweden .
• If you believe your experience, skills, and ambitions align with this role, please submit your CV in English.