Cyber Security & IDT Compliance Lead, Central Europe Hybrid

The British American Tobacco Group; Warszawa; On-site; PLN 290,000 - 420,000; Full time

Benefits offered by this job

Annual bonus

Health plans vary by country

Work-life balance initiatives

Transportation support

Flexible holiday plan

Online learning platforms

Job summary

The British American Tobacco Group in Warsaw is seeking a Cyber Security & IDT Compliance Manager CE to lead the CE cyber security function, drive strategy and ensure regulatory alignment. You will manage a small team, oversee governance, risk management and vulnerability coordination, and influence stakeholders across markets.

Responsibilities include maintaining the CE compliance framework, coordinating audits, and delivering risk-based remediation.

Qualifications

• Degree in IT, Cyber Security, Risk Management or related field.

Responsibilities

• Lead and develop the cyber security team, setting clear priorities and ensuring delivery across governance, compliance and patching coordination.
• Own CE cyber security strategy, roadmap and policies aligned with global priorities.
• Deliver and maintain the CE IDT compliance framework and control navigator alignment.
• Monitor controls, advise on risk mitigation and call out material risks.
• Coordinate audits and SAT approvals.
• Oversee vulnerability and patching within CE scope.
• Drive security projects and awareness campaigns.

Skills

People management

Cyber security governance

Risk management

IT audit

Stakeholder management

Communication skills

Analytical thinking

Prioritisation

English proficiency

Education

Degree in IT/Cyber Security/Risk Management

Tools

ISO 27001

NIST

COBIT

ITIL

SOX

Job description

The British American Tobacco Group in Warsaw is seeking a Cyber Security & IDT Compliance Manager CE to lead the CE cyber security function, drive strategy and ensure regulatory alignment. You will manage a small team, oversee governance, risk management and vulnerability coordination, and influence stakeholders across markets.

Responsibilities include maintaining the CE compliance framework, coordinating audits, and delivering risk-based remediation.