Chief Information Security Officer (m/f/d)

Symrise AG; Barcelona; Presencial; EUR 140.000 - 210.000; Jornada completa

Descripción de la vacante

Symrise AG is seeking a Chief Information Security Officer (CISO) to define and lead its global cyber and information security strategy across production environments, data and critical technology services. You will report to the CDIO and shape a multi-year security roadmap, advising senior management and the Executive Board on cyber risk and resilience.

In this highly visible role you will build and guide a global security organization, promote a pragmatic security culture, and ensure alignment

Formación

• University degree in a relevant discipline.
• Recognised cyber security certifications such as CISSP, CISM, CISA or equivalent.
• Extensive leadership experience defining and leading enterprise-wide cyber security strategies in multinational environments.
• Experience embedding security into digital transformation and production environments.
• Track record of leading organisations through cyber incidents with sound judgement.

Responsabilidades

• Define and execute the global cyber security strategy and multi-year roadmap.
• Lead and develop the global cyber security organization.
• Promote a strong security culture through awareness programs and leadership engagement.
• Plan and manage the global cyber security budget and external partnerships.
• Ensure compliance with ISO 27001, NIS2, GDPR and related standards.
• Lead security operations, incident response and threat intelligence.

Conocimientos

Leadership

Cyber security strategy

Governance & risk management

Incident response

Identity & access management

OT security

Zero Trust

Regulatory compliance

Educación

University degree in a relevant discipline

CISSP/CISM/CISA or equivalent

Herramientas

ISO 27001 knowledge

NIS2/GDPR awareness

Descripción del empleo

Symrise is a global supplier of fragrances and flavors, cosmetic active ingredients as well as functional ingredients. Its customers include perfume, cosmetics, food and beverage manufacturers, the pharmaceutical industry and producers of dietary supplements and pet food.

With sales of around €4.9 billion in the 2025 financial year, the company is one of the world's leading providers. The Group, headquartered in Holzminden, Germany, has more than 100 locations in Europe, Africa and the Middle East, Asia, the USA and Latin America.

Together with its customers, Symrise develops new ideas and market-ready concepts for products that form an indispensable part of everyday life. Economic success and corporate responsibility are inextricably linked.

Symrise - always inspiring more...

Your role

As Chief Information Security Officer (CISO), you will define and lead Symrise's global cyber and information security strategy at a time of accelerating digitalization and an increasingly complex risk landscape. Reporting directly to the Chief Digital & Information Officer (CDIO), you will be responsible for safeguarding Symrise's global digital ecosystem, production environments, data and critical technology services, while ensuring that security enables innovation, operational resilience and sustainable business growth.

In this highly visible leadership role, you will shape and deliver a multi-year security roadmap, advise senior management and the Executive Board on cyber risk and resilience, and lead a global organization responsible for protecting the company across all regions, business units and technology environments.

Main responsibilities include but are not limited to:

• Define, own and execute the global cyber security strategy and multi-year roadmap, aligned with business priorities, regulatory requirements and the wider IT strategy
• Lead and further develop the global cyber security organization, ensuring that its structure, capabilities and talent remain aligned with current and emerging risks
• Promote a strong and practical security culture through awareness programs, leadership engagement and guidance for employees and managers
• Plan and manage the global cyber security budget, including investment prioritization, resource allocation, cost control and the management of external partners
• Establish and maintain global security governance, policies, standards, control frameworks and risk management processes across IT, OT, cloud, digital and business environments
• Drive cyber security awareness and transparency through effective dashboarding, threat intelligence reporting, incident visibility and executive communications to enhance organizational responsiveness and resilience
• Ensure compliance with applicable security and information protection requirements, including ISO 27001, NIS2, GDPR, audit requirements and relevant industry standards
• Lead global security operations, incident response, threat intelligence, vulnerability management and cyber crisis response
• Oversee and strengthen enterprise-wide identity and access management, including access governance, privileged access, lifecycle processes, multifactor authentication and Zero Trust-related capabilities
• Advance the OT security program to protect production and industrial environments while reflecting operational and business requirements
• Support customer security assessments, audits and contractual security requirements
• Strengthen cyber resilience through crisis preparedness, IT disaster recovery and coordination with critical business functions
• Represent Symrise on cyber security matters in interactions with customers, auditors, regulators, external partners and relevant industry networks
• Keep abreast of emerging cyber threats, technology developments and AI-related risks, proactively evolving security strategies, controls and capabilities in response

About you

• University degree in a relevant discipline and recognized cyber security certifications such as CISSP, CISM, CISA or equivalent
• Extensive leadership experience defining and leading enterprise-wide cyber security strategies and organizations in complex multinational environments
• Experience embedding security into digital transformation, business operations, production environments and customer-facing processes
• Track record of leading organizations through cyber incidents and crisis situations with sound judgement and decisiveness
• Deep expertise across cyber security governance, security operations, incident response, identity & access management, cyber resilience and operational technology (OT) security
• Strong knowledge of relevant regulatory and industry frameworks, such as ISO 27001, NIS2 and data protection requirements
• Strong executive leadership capability, including responsibility for teams, budgets, transformation initiatives and Board-level reporting
• Proven ability to effectively translate cyber security risks and technical concepts into clear business recommendations for senior stakeholders and executives
• Demonstrated ability to navigate complex, fast-changing environments with agility and pragmatism, balancing strategic leadership with a hands-on approach to problem-solving, decision-making and the execution of critical security initiatives

Our offer

This is a unique career opportunity for a leader who combines deep security expertise with sound business judgement to define and lead a global information and cyber security agenda.

Come join us and embark on a fascinating journey with Symrise.