Global Information Security Manager (M/F/X)

DHL; Milton Keynes; On-site; Confidential; Full time

Job summary

DHL Supply Chain is seeking a Global Information Security Manager to lead information security initiatives worldwide. You will reduce information risk exposure, run risk assessments, and coordinate remediation with regional teams while ensuring governance and policy alignment across global sites.

The role requires 5+ years in IT and 3+ years in IT security, with strong communication skills and professional certifications. Global travel, 20% or less, and permanent full-time employment are offered.

Qualifications

• 5+ years IT experience and 3+ years IT security in corporate environment
• Experience delivering information security and risk management programs
• Knowledge of ITIL, ISO/IEC 27000, COBIT, ISAE3402
• Strong risk assessment and mitigation skills
• Excellent English communication; stakeholder management
• Degree in CS/IS/Science/Business; relevant certifications valued

Responsibilities

• Drive global information risk management, identify risks, suggest mitigations, track remediation with CISO
• Perform risk assessments and report to senior management
• Lead global Vulnerability Management program and prioritize remediations
• Drive Threat Intelligence activities and secure assets globally
• Own security treatment actions and report progress to IT leadership
• Represent DSC in governance forums and align with policies
• Advance security across AI, OT, IAM initiatives
• Enhance DSC KPI reporting and Power BI dashboards
• Manage MoD on-call responsibilities 24/7
• Lead incident response during cybersecurity incidents

Skills

IT security

Risk management

Stakeholder management

Communication skills

Problem solving

ITIL/ISO COBIT knowledge

Education

University degree in CS/IS/Science/Business Administration

CISSP

CISM

CCISO

ISO 27001 Auditor

PRINCE2

ITIL Foundation

Tools

Power BI

Job description

BE AN ESSENTIAL PART OF EVERYDAY LIFE

Position: Global Information Security Manager Grade: RCS J Contract Type: Permanent Full-time Travel Remit: Global Travel Required: Less than 20% Location: UKI, Czechia, Germany Advertising End Date: October 19, 2026 Disclaimer: Please note that this job advertisement may close earlier than the stated deadline if a sufficient number of applications are received. We encourage interested candidates to apply as soon as possible to ensure consideration for the position.

As a Global Information Security Manager, you will be responsible for running global DHL Supply Chain Information Security initiatives, aiming to reduce information risk exposure. Since Cyber Threats have increased dramatically, identifying upcoming threats and ensuring that the organization takes the necessary action to avoid business impact is considered a major priority. By regular assessment of trending Cyber Threats, this role is responsible for identifying upcoming threats and developing and rolling out counter measures to all regions. Based on the guidance provided, DHL Supply Chain regions will implement measures to reduce the risk exposure. If this sounds like a team, you’d like to join … keep reading.

Your key accountabilities include:

• Drive the global Information Risk Management program, identifying and assessing information security risks, recommending mitigation measures, and tracking remediation initiatives in close partnership with the DSC CISO.
• Perform risk assessments and provide regular reporting on risk exposure, treatment progress, and compliance performance to Senior Management and C-Level stakeholders.
• Lead the global Vulnerability Management program, ensuring vulnerabilities are identified, prioritized, and remediated based on risk and threat intelligence.
• Drive Threat Intelligence activities and raise proactive measures to secure DSC IT, cloud, and OT assets globally, while tracking remediation progress across all regions.
• Own and report security treatment actions and initiatives, ensuring implementation progress is communicated to the DSC IT Management Board.
• Represent DSC in cross-divisional security programs and governance forums, ensuring DSC business requirements are fully incorporated into global solutions, policies, and standards.
• Drive Information Security initiatives across areas such as AI Security, OT Security, and Identity & Access Management (IAM), supporting the successful adoption of strategic security capabilities.
• Maintain and continuously enhance DSC InfoSec KPI reporting and dashboards, driving the evolution of Power BI reporting to provide meaningful insights into security posture, emerging risks, and performance trends.
• Take regular Manager on Duty (MoD) responsibilities as part of DSC Information Security’s 24/7 on-call capability, ensuring timely escalation, communication, and resolution of major security incidents.
• Lead global incident response activities during cybersecurity incidents, coordinating the Incident Response Team, providing leadership during crisis situations, and ensuring a professional and effective response.

What are we looking for from you?

• 5+ years of IT experience and 3+ years of IT Security experience, preferably in a Corporate Environment.
• Proven experience in delivering information security and risk management improvement programs.
• Practical experience with ITIL, ISO/IEC 27000 series standards, COBIT, and ISAE3402.
• Proven experience in delivering change improvements and associated technology upgrades.
• Strong experience in completing risk assessments and applying effective mitigation measures.
• Good knowledge of Cyber Security, data privacy regulations, IT service management, and IT project delivery.
• Pragmatic and highly effective problem-solving skills, with strong analytical and reasoning capabilities.
• Proven capability in senior stakeholder management, combined with commercial orientation and customer focus.
• Excellent verbal and written communication skills (English), with the ability to engage diverse stakeholders.
• University Degree in Computer Science, Information Systems, Science, or Business Administration, with certifications such as CISSP, CISM, CCISO, ISO 27001 Auditor, Prince 2, or ITIL Foundation Service Management highly valued.

We will ensure that all our resourcing activities are fair, transparent, and consistent across the Globe. We want to ensure that the candidate experience is of the highest professional standard. The Company is committed to providing equality of opportunity for all employees. Furthermore, we aim to ensure our workplaces are free from discrimination and that not only employees but also our potential future employees are treated fairly and with dignity and respect. We will ensure that equality of opportunity maintains a high profile in our SummaryJob number: AV-