Director of Digital Business Cyber Security/Corporate Data Protection

Brambles Limited; Addlestone; Hybrid; GBP 80,000 - 120,000; Full time

Job summary

A leading global logistics company is seeking a Data and Digital Cyber Leader/Director to ensure cyber security compliance across digital operations. The successful candidate will partner with various teams to enhance cyber maturity and implement data protection initiatives. A minimum of one relevant Information Security certification and hands-on experience in Information Security are required. This role supports a hybrid working model.

Benefits

Hybrid work model

Diverse and inclusive workplace

Qualifications

• Must hold at least one relevant Information Security certification.
• Experience in hands-on Information Security roles required.
• Strong background in data security and risk management needed.

Responsibilities

• Drive overall cyber security compliance across Digital organization.
• Partner with Global Privacy Office for Data Protection initiatives.
• Act as primary security contact for IT and business leaders.

Skills

Cybersecurity Risk Management

Cyber Threat Detection

Data-Driven Decision Making

Stakeholder Engagement

Education

Information Security certification (CISSP, CRISC, CISM, CISA)

Job description

CHEP helps move more goods to more people, in more places than any other organization on earth via our 347 million pallets, crates and containers. We employ approximately 13,000 people and operate in 60 countries. Through our pioneering and sustainable share-and-reuse business model, the world's biggest brands trust us to help them transport their goods more efficiently, safely and with less environmental impact.

What does that mean for you? You'll join an international organization big enough to take you anywhere, and small enough to get you there sooner. You'll help change how goods get to market and contribute to global sustainability. You'll be empowered to bring your authentic self to work and be surrounded by diverse and driven professionals. And you can maximize your work-life balance and flexibility through our Hybrid Work Model.

Job Description

Brambles continues to expand its capabilities in digitizing the pallet pool, and in doing so generates increasingly large amounts of digital data assets. This digitization effort is driven by a central "Digital" function, alongside the Global Cyber team.

The Data and Digital Cyber Leader/Director will report into the global Cyber team (dotted line to Digital leadership) and be responsible for driving overall cyber security compliance across the Digital organization, partnering with the multiple Digital and Technology Service teams to ensure appropriate and effective cyber controls and compliance is achieved, across all digitally designed and run platforms, hardware, software, interfaces, and 3rd party capabilities. Effectiveness will start with developing a thorough understanding of our digital business and solutions, extend to driving evaluation and remediation efforts to improve cyber maturity across Digital solutions, and end with ensuring all new solutions and capabilities are secure by design.

This leader will take a risk-based approach to prioritization and investment, in alignment with the Board approved Cyber Strategy, and ensure choices and investment are clear with respect to cyber needs across the Digital space.

In addition, this leader will partner closely with the Global Privacy Office and Data Management teams to drive overall Data Loss Prevention and Data Protection across Brambles as a whole. This will include evaluating and implementing new people, process, and technology to better manage Data Loss Prevention at scale, and ensuring appropriate protections and controls are in place in tracking, managing, and protecting Brambles data.

Key Accountabilities

Digital:

• Work closely with the Digital business globally to review, evaluate, interpret, influence, and provide leadership on proposed and enacted cyber protections and capabilities and industry-best practices in their jurisdictions. Amongst other things, this will require working closely with relevant stakeholders to identify and address cyber controls and data security issues or concerns in new or existing processes, products and services, and IT systems/software and carrying out formal assessments and, where appropriate, drive change where change is needed.
• Act as the primary security contact, collaborating with business and IT leaders to balance risk/reward to improve security in IT applications and third-party engagements, developing deep understanding of business processes, systems, technologies, data, stakeholders and third-party partners.
• Partner with Compliance, Legal, IT resources to achieve effective working relationship that can further the effectiveness of the Information Security Program.
• Advocates for required change and continuously manages policy and standards exceptions program. Leads discussions and answers complex cross-functional policy and standards questions, forecasting best practice in policy.
• Support implementation of Governance, Risk, and Compliance (GRC) and third-party security toolset for the Digital organization. Ensures collaboration with GRC stakeholders.
• Contributes to and aligns risk programs with the NIST CSF based information security program.
• Communicate, oversee and carry out technical implementation of security solutions required to meet business objectives.

Data:

• Define and drive the global Data Protection and Data Loss Prevention program to ensure all sensitive Brambles data is appropriately protected, especially when shared outside of the company.
• Engaging collaboratively with application development, data protection, information security, and risk management teams to understand and implement data security solutions.
• Supporting vendor assessments, including proof of concepts & security technologies research

Experience

• At least one Information Security certification such as CISSP, CRISC, CISM, CISA, etc.
• Commercial experience of working in hands-on, functional Information Security roles.
• Hands on data security experience and/or Audit/Risk.
• Security program development or operations experience.
• Demonstrated experience leading data privacy programs for multinational corporations.
• Experience driving large-scale programs, leading and executing cross-business or cross-function initiatives, defining solutions and demonstrating impact or value based on metrics.
• Experience reviewing compliance, mitigating risk and advising senior leadership on privacy laws and regulations, such as GDPR.

Remote Type

Hybrid Remote

Skills to succeed in the role

Adaptability, Cross-Functional Work, Cybersecurity Risk Management, Cyber Threat Detection, Cyber Threat Mitigation, Data-Driven Decision Making, Digital Literacy, Emotional Intelligence, Feedback, Incident Management, Incident Response Planning, Inclusive Leadership, Innovation, Learn From Mistakes, Mentorship, Motivating Teams, Prioritization, Security Governance, Stakeholder Engagement, Strategy Development, Talent Development

We are an Equal Opportunity Employer, and we are committed to developing a diverse workforce in which everyone is treated fairly, with respect, and has the opportunity to contribute to business success while realizing his or her potential. This means harnessing the unique skills and experience that each individual brings and we do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state, or local protected class.

Individuals fraudulently misrepresenting themselves as Brambles or CHEP representatives have scheduled interviews and offered fraudulent employment opportunities with the intent to commit identity theft or solicit money. Brambles and CHEP never conduct interviews via online chat or request money as a term of employment. If you have a question as to the legitimacy of an interview or job offer, please contact us at [e-mail].