Head of Group Information Security

• Provide leadership, direction, and advocacy to effectively manage the cybersecurity program.
• Develop and implement the agreed cybersecurity strategy in alignment with the business and IT strategy.
• Oversee staff, infrastructure, policy enforcement, and/or other resources.
• Drive the development of policies & standards and advocate for change that will support new initiatives or required changes and enhancements.
• Apply knowledge of risk assessment data of identified threats to decision-making processes.
• Acquire and manage the necessary resources, including third party security service providers, to support security goals, and reduce overall organizational risk.
• Advise senior management on risk levels and security posture.
• Communicate the value of security throughout all levels of the organization’s stakeholders.
• Monitor threats, conduct investigations, support inquiries, and take preventive measures to improve business resilience.
• Develop and provide security guidance for new and existing systems, applications, and services; this includes weighing business needs, internal governance standards, and third-party compliance requirements.
• Partner with subsidiary IT teams to establish and track regional and global priorities for security initiatives.
• Provide regular reporting on security initiatives to the Head of Group IT and senior management.
• Provide leadership regarding security for assets and data, both on-premises and cloud-based.
• Evaluate emerging technologies and product categories to determine where they fill gaps, overlap with existing solutions, or extend capabilities.
• Implement and maintain security systems, applications, and services that provide detection, preventions, containment and deterrence mechanisms to protect corporate data.
• Lead the selection, testing, and deployment of new security solutions.
• Document security requirements by evaluating business needs, internal governance standards, and third-party & customer compliance requirements.
• Manage relationships with existing and future managed security service providers (MSSPs) that contribute to the portfolio of security services.
• Manage and coordinate response to security incidents.
• Facilitate compliance with audit, legal, regulatory, and customer contract requirements.
• Analyse and evaluate security operations to identify risks or opportunities for improvement.

• The position requires a Bachelor's degree and at least fifteen (15) years of related experience with a minimum of six (6) years of technical experience in one or more of the following: computer and network security, cloud-based security architecture, vulnerability testing, intrusion detection/prevention, security monitoring and event correlation, or computer forensic analysis.
• Relevant Information Security certifications (ex. CISSP, CCSP, GIAC, MCSE, CEH, CHFI, CISA, CISM, CRISC, etc.)
• Highly-developed communications skills (written/verbal) and interpersonal savvy.
• Results/action-orientation; project management skills.
• Organizational and political agility; developed negotiation and influence skills.
• Able to successfully navigate within varying degrees of ambiguity in a fast-paced environment.
• Prior experience working in a global, decentralized organization.
• Extensive knowledge of cybersecurity principles.
• Extensive knowledge of cyber threats and vulnerabilities.
• Skill in de-conflicting cyber operations and activities.

Unquestionable personal code of ethics, integrity, diversity and trust.

Looking to grow your career in a dynamic, international setting? Join the Lindt & Sprüngli Group! Together, we thrive to achieve our bold ambitions, powered by our purpose and unique culture of community and mutual support – rooted in a proud tradition, yet always evolving to…