Head of Information Security

Randstad II - Prestação de Serviços, Limitada; Lisboa; Híbrido; EUR 140 000 - 190 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary

Flexible work environment

Impact on company development

Resumo da oferta

Randstad Digital is seeking a Head of Information Security to lead a new information security and risk centre for a global manufacturing client. You will report to the CISO and build a high-performing team, driving policy portfolio development and policy embedding across the organisation.

The role includes overseeing Security Operations, managing providers, and ensuring alignment with data protection, operational risk, and internal audit functions while delivering enterprise risk governance and

Qualificações

• Minimum of 4 years of experience in IT Security, Governance, Risk and Compliance.
• Experience in the manufacturing sector and regulatory requirements.
• Proficiency in cybersecurity frameworks (ISO, NIST, NIS2, CIS) and risk assessment.

Responsabilidades

• Deliver information/cyber security risk management and governance across the organization.
• Oversee Security Operations and manage service providers for security operations.
• Develop and maintain security policies and guidelines and embed them across the organization.
• Partner with legal, compliance, and internal audit to align data protection and risk programs.

Conhecimentos

Leadership

Communication

Strategic thinking

Business acumen

Problem-solving

Descrição da oferta de emprego

Randstad Digital is currently searching for a talented Head of Information Security to join the team of one of our prestigious clients.

Reporting to the CISO, the Head of Information Security (HoIS) is a key role in the Cyber security leadership team. To succeed in this role, you will need to enjoy a green field experience and the challenges of building and leading a small “centre of excellence” information security and risk team. The team will set a new bar for information security and risk management in a global manufacturing organisation.

Essential skills

• Leadership and management capabilities
• Ability to communicate complex technical information to a range of audiences.
• Strategic thinking
• Business acumen
• Problem-solving

Purpose of the role

The HoIS is responsible for delivering information/cyber security risk management and governance processes and ensuring effective integration and alignment with the HellermannTyton Data Protection, Operational Risk, and Internal Audit functions. An additional important function of the HoIS is to oversee and direct the Security Operations function on behalf of the CISO, including direct management and accountability for the performance of any service providers involved. The HoIS is responsible for the development and maintenance of the organisation’s technology related policy portfolio and associated guidelines. Importantly this includes actively working to embed those policies across the organisation. A further key responsibility for the Head of Information Security is to lead and supervise the Security Operations function on behalf of the CISO. This includes providing direct oversight and holding accountability for the performance and effectiveness of all service providers engaged in delivering security operations. The HoIS is also tasked with developing and maintaining the organisation’s portfolio of technology-related policies and accompanying guidelines. Crucially, this involves proactively embedding these policies throughout the organisation to ensure consistent adoption and compliance.

responsabilidades chave

To deliver the optimal outcomes for the HoIS will partner with internal and external providers including executives and managers across different business and departments, third-party vendors, and thought leaders in the wider industry.

Core responsibility areas.

• Governance, Risk and Compliance
• Supply Chain risk.
• Business Cyber Security awareness
• Security Operations
• Incident Management

Policy and Standards

• Policies: Develop and maintain security policies, procedures, and standards that govern all aspects of information security at HellermannTyton.
• Compliance: Ensure compliance with the relevant security regulations and industry standards (e.g., PCI DSS, GDPR, TISAX, NIS2).
• Policy Implementation: Oversee the implementation and enforcement of security policies across all global businesses and locations.
• Training: Ensure employees are trained on security policies and procedures to raise awareness and encourage responsible data handling.
• Risk management
• Risk program: Develop, implement, and monitor a strategic, comprehensive enterprise information security risk management program.
• Risk management: Work directly with the business units to facilitate risk assessment and risk management processes.
• Awareness: Partner with business stakeholders across the company to raise awareness of risk management concerns.
• Supply Chain: Develop, implement, and maintain a supply chain cyber security risk management framework for the enterprise.

Data Governance and Compliance

Data Security: Partner with legal and compliance teams to understand data privacy regulations and translate them into actionable data security practices.

Head of Information Security Role Profile

Internal

• Data Governance: Develop and maintain data governance policies and procedures for data ownership, access, usage, and retention.

Other responsibilities

• Framework: Develop and enhance an information security management framework and maintain an effective ISMS.
• Collaborative working: Understand and interact with related disciplines through design authorities and direct working relationships to ensure the consistent application of policies and standards across all technology projects, systems, and services.
• Awareness: Foster a culture of security awareness and responsibility within the business.

competências

• Experience: Minimum of 4 years of experience in IT Security, Governance, Risk and Compliance, IT Audit with proven experience in the delivery of risk and compliance assessments
• Industry Knowledge: Extensive experience in the manufacturing sector, understanding the unique challenges and regulatory requirements.
• Technical Expertise: Proficient in cybersecurity frameworks (e.g., ISO, SOX, TISAX, NIST, NIS2, CIS), risk management, incident response, and threat intelligence.
• Documentation: Strong documentation skills to contribute to security policies, processes, and procedures and to produce risk assessment reports, findings, and recommendations
• Ground Up: Experience in building and leading high-performing information security teams from the ground up.
• Technology: Strong understanding of cloud computing, virtualisation, networking, and emerging technologies.
• Certifications: Relevant certifications such as CISSP or CISM, are desirable but not mandatory. A willingness to get involved and roll your sleeves up is mandatory.

Skills and Attributes:

Leadership: Strong leadership and team management skills, with the ability to inspire and motivate.

principais benefícios

• Competitive salary and benefits
• Flexible work environment with a focus on work-life balance.
• True Impact on the company development and culture;