TS&O Cyber Security Officer

HEINEKEN Global Shared Services; Kraków; On-site; PLN 167,400 - 223,200; Full time

Job summary

HEINEKEN Global Shared Services in Kraków seeks a Cyber Security Officer to enhance our information security. This role involves coordinating cybersecurity activities, managing risks, ensuring compliance, and advising IT teams on security controls.

Candidates should have over 5 years of experience in Cyber Security, a relevant degree, and fluency in English. We value integrity and encourage reporting of any concerns regarding compliance.

Qualifications

• 5+ years of experience in Cyber Security.
• Experience in agile teams and multi-cultural environments.
• Experience with ISO 27001, COBIT, GDPR, and audit processes.

Responsibilities

• Coordinate cybersecurity activities across companies and adapt global strategies.
• Manage cybersecurity risks and ensure compliance with security policies.
• Support incident response and advise IT teams on security controls.

Skills

Cyber Security expertise

Agile teamwork in multi-cultural environments

Relationship management

Influencing skills

Fluent English

Education

Bachelor’s or Master’s degree in Information Security

Tools

ISO 27001

COBIT

Job description

Digital & Technology Team (D&T) is an integral division of HEINEKEN Global Shared Services Center, committed to making Heineken the most connected brewery by digitalizing and integrating our processes, ensuring best‑in‑class technology, and embedding a data‑driven culture.

The Cyber Security Officer actionizes the strategic direction, policies, and governance designed by GIS and controls to ensure the effective delivery of a high‑quality Information Security service for HEINEKEN. As a member of the TP&S Hub Information Security team, the Cyber Security Officer will be the subject‑matter expert for all matters around information security, be a member of the incident response team in the event of a security breach and be one of the main contacts for OpCo stakeholders. In addition, the role holder has joint responsibility for Control processes, including audit, security, business continuity and regulatory compliance across D&T.

Your Responsibilities

• Coordinating cybersecurity activities across assigned Operating Companies/Divisions and acting as a bridge between global and local teams
• Implementing global security strategies, standards, and solutions while adapting them to local requirements
• Managing and assessing cybersecurity risks, including conducting risk reviews and defining mitigation or acceptance plans
• Monitoring compliance with security policies and overseeing audit processes while ensuring timely remediation of findings
• Coordinating end‑to‑end incident response, including communication with stakeholders and collaboration with technical teams
• Advising and supporting IT and business teams on security controls such as patching, vulnerability management, and antivirus
• Contributing to the design and continuous improvement of security standards, controls, and processes
• Monitoring effectiveness of security controls and analyzing deviations or exceptions from policies
• Supporting investigations of security incidents and potential breaches
• Driving cybersecurity awareness initiatives and supporting capability development across local teams

Required Experience

• 5+ years of working experience in the Cyber Security area
• 5+ years of experience working in agile teams in multi-cultural environments
• 5+ years of working with senior business stakeholders, influencing and working with Operating Companies/Divisions
• Bachelor’s or Master’s degree in Information Security or a relevant subject
• A strong technical background with experience in one or more IT areas
• Experience of technical disciplines in relation to Information and Cyber Security management
• Experience of working with relevant standards such as ISO 27001, COBIT, and relevant laws and regulations, such as privacy laws, including GDPR
• Experience of managing audit and control processes within a technology context
• Ability to work in a cross‑functional environment and preferably experience in FMCG
• Ability to manage multiple conflicting priorities and deadlines in a matrix environment with rapid change
• Good interpersonal skills, oral and written communication skills, relationship management and influencing skills
• Ability to build and leverage personal and professional networks
• Working within a local and global matrix context
• Strong attention to detail, independent judgment and decision‑making
• Experienced in self‑development through continuous learning, sharing best practices, knowledge, and expertise
• Fluent English level, both written and spoken

Preferred Qualifications

• Certification in relevant IT Security discipline (e.g. CISA, CISM, CISSP, CEH)

At HEINEKEN Kraków, we take integrity and ethical conduct seriously. If someone has concerns about a possible violation of legal regulations indicated in Polish Whistleblowing Act or our Code of Business Conduct, we encourage them to speak up. Cases can be reported to the global team or locally (in line with the local HGSS Whistleblowing procedure) by selecting the proper option in this tool or by communicating it on the hotline.