Director of Cyber Security & Governance

Director of Cyber Security & Governance

Final date to receive applications: 19 July 2026

Department: BizTX

Employment Type: Permanent - Full Time

Location: Andover

Great People Work Here.

BizTX:
Co-Creating WOW Through Digital Innovation

It’s an exciting time to be part of BizTX at Twinings Ovaltine. At the heart of this iconic brand, we’re on a mission to drive exponential growth and productivity through cutting-edge technology to transform the business globally.

We’re not here to simply provide IT services. We’re technology leaders and strategic partners, co-creating innovative solutions that help the business run, grow, and transform. Everything we do is guided by our commitment to ‘WOW’ our consumers, customers and colleagues. WOW experiences, WOW solutions, and WOW impact.

Our people think differently. We have an exponential mindset that helps us push boundaries and shape what’s next. The future at Twinings Ovaltine is full of possibility and we’d love you to be a part of it.

As a key member of the BizTX Senior Leadership Team, Lead cyber security and IT governance, risk and compliance (GRC) for Twinings

OvO. Own the business’s security posture and IT control environment and act as Twinings

OvO’s senior security point of contact into the ABF Group CISO function.

This is a build-and-embed leadership role. The goal is to make security and control proportionate, owned and integrated into how the business runs and how the transformation agenda is delivered - an enabler, not a blocker.

This is a divisional security leadership role. The ABF Group CISO owns Group security strategy, standards, architecture, threat intelligence, monitoring and major incident command. This role does not duplicate that.

• The Director adopts and ope rationalises Group security standards within Twinings
  
  OvO, and owns local cyber risk and the IT control environment.
• The Director is Twinings
  
  OvO’s senior point of contact into ABF Group Cyber Security and Group Internal Audit.
• The role is sized for a complex but single-division business delivered through standards, partnering and influence rather than a large standing team.

As a member of the BizTX Leadership Team, the Director contributes beyond cyber security — helping shape technology direction, risk management and business transformation priorities, and the overall resilience and success of BizTX.

• Twinings
  
  OvO cyber risk posture and the cyber risk register.
• IT GRC: control framework, IT general controls (ITGCs), policy adoption and exceptions, control testing and continuous compliance.
• Audit readiness and remediation across IT and security.
• Security-by-design across BizTX delivery (S/4
  
  HANA RISE, AMS, AI, integrations, cloud and data).
• Identity, access and segregation-of-duties governance for critical platforms.
• Third-party, SaaS and AMS security and privacy risk assessment.
• Local coordination of security incidents and escalation to the Group.
• Security awareness and culture within the business.

• Group security strategy, standards authorship and architecture direction.
• Group SOC, SIEM, threat intelligence and 24/7 monitoring.
• Group-wide / major incident command.
• Enterprise security tooling selection at the Group level.

• Lead cyber security and IT GRC for Twinings
  
  OvO and set the local roadmap, priorities and investment case within ABF Group standards.
• Make security and control proportionate to a single-division business — through standards, partnering and influence, not a large standing team.

• Own Twinings
  
  OvO’s cyber risk posture; maintain a single, prioritised cyber risk register with named owners and tracked remediation.
• Give the GM and Leadership Team clear visibility of risk exposure and control effectiveness.
• Coordinate local response to security incidents, with rapid escalation to and alignment with the ABF Group security function.
• Drive vulnerability, patch and exposure management in line with Group expectations.

• Own the IT control environment, including ITGCs across SAP S/4
  
  HANA and other core…