Senior Manager, Cybersecurity

The Coca-Cola Company; City Of London; On-site; GBP 110,000 - 140,000; Full time

Job summary

The Coca-Cola Company, including Innocent, seeks a Cybersecurity Senior Manager to lead the cybersecurity roadmap, drive security improvements, and embed secure practices across the organization. You will partner with leadership to align investments with risk priorities and drive security engineering across cloud and on‑premise environments.

Your role combines strategic leadership with hands-on security delivery, governance, risk management, and incident response, with opportunities to grow into

Qualifications

• / Demonstrable experience in cybersecurity, information security, or security engineering roles.
• / Experience implementing and operating cybersecurity controls within cloud-based environments.
• / Strong understanding of Microsoft security technologies (Defender, Sentinel, Entra ID, Purview).
• / Experience with vulnerability management tooling (Qualys/Tenable/Rapid7).
• / Knowledge of cloud security posture management and incident response.

Responsibilities

• Lead Cybersecurity Strategy & Program Delivery, developing and executing Innocent's cybersecurity roadmap.
• Oversee Security Engineering and Technical Security across cloud and on-premise environments.
• Support Governance, Risk & Compliance, audits, and policy development.
• Engage stakeholders and provide cybersecurity advisory across projects and teams.
• Oversee vulnerability management, remediation tracking, and risk reporting.
• Guide incident response activities and coordinate with business units.

Skills

Cybersecurity leadership

Stakeholder engagement

Program management

Risk management

Communication skills

Security governance

Mentoring

Tools

Microsoft Defender Suite

Microsoft Sentinel

Microsoft Entra ID

Microsoft Purview

Qualys

Tenable

Rapid7

Job description

Position Overview

The Cybersecurity Senior Manager will play a key role in strengthening and maturing Innocent's cybersecurity capabilities by leading the delivery of the cybersecurity roadmap, driving security improvement initiatives, and embedding secure practices across the organization.

This role combines technical cybersecurity expertise with leadership, program management, and stakeholder engagement. The successful candidate will be responsible for driving security engineering and operational security activities while ensuring that governance, risk, and compliance requirements are effectively managed.

This role operates within The Coca-Cola Company's Global Cybersecurity function and works closely with security, technology, and business leaders across innocent, other wholly owned entities, and the broader Coca-Cola system to advance cybersecurity strategy, risk management, and security engineering capabilities.

The successful candidate will bring strong technical cybersecurity capabilities alongside exceptional leadership potential, with the ability to influence stakeholders, drive change, and translate complex security challenges into practical business outcomes; as well as demonstrate the potential to evolve into broader cybersecurity leadership responsibilities through strong strategic thinking, business acumen, stakeholder engagement, and execution excellence.

Key Responsibilities:

Cybersecurity Strategy & Program Delivery

• Support the development and execution of Innocent's cybersecurity strategy and roadmap.

• Lead cybersecurity improvement programs and initiatives from concept through implementation.

• Drive the adoption of security best practices across technology and business teams.

• Identify opportunities to enhance security capabilities through process improvement, automation, and technology optimization.

• Track and report on cybersecurity objectives, milestones, risks, and performance metrics.

• Translate cybersecurity risks into business impact and actionable recommendations for leadership.

• Partner with business leaders to align cybersecurity investments with organizational objectives and risk priorities.

• Provide cybersecurity input into strategic initiatives, digital transformation programs, and third-party engagements.

Security Engineering & Technical Security

• Lead and support the implementation of security technologies and controls across cloud and on-premise environments.

• Partner with technology teams to promote secure architecture, secure development, and security-by-design principles.

• Manage and enhance cloud security capabilities, including cloud security posture management and security monitoring solutions.

• Support vulnerability management activities, including identification, prioritization, remediation tracking, and reporting.

• Provide technical guidance on cybersecurity standards, controls, and emerging security threats.

• Maintain awareness of evolving threat landscapes and recommend appropriate defensive measures.

Governance, Risk & Compliance

• Support cybersecurity governance activities, including policy, standards, and procedure development.

• Conduct and facilitate cybersecurity risk assessments and remediation planning.

• Support internal and external audits and cybersecurity assurance activities.

• Ensure compliance with applicable corporate policies, regulatory requirements, and industry standards.

• Contribute to third-party cybersecurity risk management processes where required.

• Produce meaningful reporting and metrics to communicate cybersecurity risks and programs effectiveness.

Stakeholder Engagement & Leadership

• Build strong relationships with business and technology stakeholders across Innocent and Coca-Cola.

• Influence secure decision-making through effective communication and risk-based recommendations.

• Act as a trusted cybersecurity advisor to project teams and business leaders.

• Provide leadership and direction for cybersecurity initiatives, coordinating resources across multiple teams.

• Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization.

• Provide leadership and coordination for cybersecurity incident response activities and major security events.

Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting.

Role Requirement

• Demonstrable experience in cybersecurity, information security, or security engineering roles.

• Experience implementing and operating cybersecurity controls within cloud-based environments.

• Strong understanding of Microsoft security technologies, including some combination of:

• Microsoft Defender Suite

• Microsoft Sentinel

• Microsoft Entra ID

• Microsoft Purview

• Experience with vulnerability management processes and tooling such as Qualys, Tenable, Rapid7, or equivalent platforms.

• Knowledge of cloud security posture management and cloud security best practices.

• Familiarity with threat intelligence, threat detection, and incident response processes.

• Ability to balance technical security requirements with business priorities.

• Experience managing and delivering cybersecurity projects or programs

• Strong analytical and problem-solving capabilities.

• Excellent written and verbal communication skills.

• Ability to communicate effectively with both technical and non-technical stakeholders.

• Demonstrated ability to work independently while influencing outcomes across a matrixed organization.

• Strong sense of ownership, accountability, and continuous improvement.

Additional Qualifications for a Competitive Advantage

• Experience within FMCG, manufacturing, supply chain, or consumer goods environments.

• Hands-on experience with Microsoft Azure security technologies.

• Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms.

• Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications are desirable.

• Experience supporting ISO 27001, NIST CSF, CIS Controls, or similar security frameworks. Experience working with third-party suppliers and cybersecurity assessments. Experience leading or supporting security incident investigations.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class.