Cyber Security & IDT Compliance Lead CE (f/m)

The British American Tobacco Group; Warszawa; Híbrido; PLN 320 000 - 420 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Annual bonus

Health & benefits

Flexible holidays

Career development

Resumo da oferta

British American Tobacco Poland is hiring a Cyber Security & IDT Compliance Lead in Warsaw to own the CE cyber security strategy, governance, and IDT compliance framework. You will lead a three-person team, coordinate risk assessments, and drive remediation across the region.

The role focuses on risk-based controls, reporting, and cross-functional collaboration with global and regional partners. Fluency in English is required; Central European language experience is a plus.

Qualificações

• Degree in information technology, cyber security, risk management or equivalent experience.
• Significant experience in cyber security governance, technology risk, IDT compliance, IT audit in a multinational.
• Proven people-management experience leading diverse teams.
• Strong knowledge of ISO 27001, NIST, COBIT, ITIL and SOX and related regulatory expectations.
• Experience in cyber and technology risk assessments, controls, monitoring and remediation management.
• Understanding of vulnerability and patching management processes and reporting.
• Excellent analytical, problem-solving and stakeholder-management skills; fluent English.

Responsabilidades

• Lead, coach and develop the team, setting clear priorities and ensuring delivery across governance, compliance and patching.
• Own and drive the Central Europe cyber security strategy, roadmap and policies.
• Deliver and maintain the CE IDT compliance framework and related controls.
• Cascade and monitor cyber security controls, advise on risk mitigation and material risks.
• Ensure transparent reporting of vulnerability, IDT IRI, cyber security incidents and remediation progress.
• Act as CE cyber security lead, influencing IDT, business and regional teams on priorities.
• Oversee audit preparation and coordination; support cyber security assessments and approvals.
• Coordinate vulnerability and patching within CE scope with reporting and remediation plans.
• Own prioritisation of cyber security projects and awareness campaigns.

Conhecimentos

Cyber security governance

Risk management

IT audit

People management

ISO 27001

NIST / COBIT / ITIL / SOX

Stakeholder management

Fluent English

Formação académica

Degree in IT or Cyber Security

Descrição da oferta de emprego

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow by Building a Smokeless World. To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

British American Tobacco Poland has an exciting opportunity for a Cyber Security & IDT Compliance Lead in Warsaw

The Cyber Security & IDT Compliance Lead CE owns and drives the Central Europe cyber security strategy, roadmap and policies, aligned with local, regional and global priorities, BAT standards and applicable regulatory requirements.

The role leads a team of three, delivers the IDT compliance framework and ways of working, and oversees cyber security governance, risk and compliance and vulnerability and patching coordination. Acting as the CE cyber security point of contact, the role influences partners, prioritises projects and awareness campaigns, monitors controls and brings up material risks.

Our key responsibilities will include:

• Lead, coach and develop the team, setting clear priorities, allocating work and ensuring consistent delivery across cyber security governance, compliance and vulnerability and patching coordination.
• Own and drive the Central Europe cyber security strategy, roadmap and policies, ensuring alignment with local, regional and global priorities.
• Deliver and maintain the CE IDT compliance framework and ways of working, aligned with Control Navigator controls; oversee annual Control Navigator, Risk Register and ERM exercises.
• Cascade and monitor cyber security controls, support and advise team members on risk mitigation, and call out material risks.
• Ensure transparent reporting and oversight of vulnerability, IDT IRI, cyber security incident and IRM trackers, including remediation progress, exceptions and material issues.
• Act as the CE cyber security lead, advising and influencing IDT, business, global and regional participants on cyber security priorities and controls.
• Oversee audit preparation and coordination through the team, oversee support for cyber security assessments and SAT approvals.
• Oversee vulnerability and patching coordination within the defined CE CBU and OBU scope, ensuring site/EM-level reporting, status tracking, remediation plans, exceptions and documentation.
• Own and prioritise cyber security projects and awareness campaigns, providing direction and oversight of delivery through the team and relevant partners.

What are we looking for?

• Degree in Information Technology, Cyber Security, Risk Management or a related field, or equivalent relevant professional experience.
• Significant experience in cyber security governance, technology risk, IDT compliance, IT audit or a related field within a complex, multinational organisation.
• Proven people-management experience, with the ability to lead, coach and develop a geographically or functionally diverse team.
• Strong knowledge of security, risk and control frameworks such as ISO 27001, NIST, COBIT, ITIL and SOX, together with relevant regulatory expectations.
• Practical experience in cyber and technology risk assessments, internal controls, compliance monitoring, audit coordination and remediation management, including cyber security strategy and roadmap delivery.
• Understanding of vulnerability and patching management processes, including reporting, risk analysis, remediation tracking, exceptions and coordination with technical teams and vendors.
• Strong analytical, problem-solving skills, with the ability to prioritise across multiple markets.
• Excellent stakeholder-management and communication skills, with the ability to explain technical risks clearly, provide constructive challenge and influence senior stakeholders.
• Fluent English is mandatory and Another Central European market language would be an advantage.

What we offer you?

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it’s a reality we’re eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

WHY JOIN BAT?

We're one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.

Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.

We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).

Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.

If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.

British American Tobacco Polska Trading sp. z o.o., in compliance with Article 24(6) of the Act of 14 June 2024 on the Protection of Whistleblowers (the "Act"), has established an internal reporting procedure (the "Procedure"). The Procedure is available on the British American Tobacco Poland website under "Our Procedures and Policies".

Under the Act, protection applies to individuals who submit a report in good faith. Submitting a report while knowingly aware that no violation of law has occurred may constitute an offense under Article 57 of the Act, punishable by up to two years of imprisonment.

#LI-Hybrid