Head of Cyber Risk & Assurance

H&M; Stockholms kommun; On-site; SEK 900,000 - 1,300,000; Full time

Benefits offered by this job

Staff discount cards

Flexible work arrangements

Wellness benefits

Parental support

Job summary

H&M Group seeks an experienced Unit Manager for Cyber Risk & Assurance to lead the function and drive cyber risk strategy across the global organisation. You will partner with business, technology and security teams to advance the ISMS, governance and assurance framework, while managing budgets and key vendor relationships.

You will influence senior stakeholders, shape policy, and champion a high‑performing, inclusive culture that delivers business value and resilience against evolving cyber

Qualifications

• 8+ years of people management in cyber security, technology risk, governance, compliance or related field.
• Experience leading enterprise-scale cyber risk, governance, compliance or assurance in a global organisation.
• Experience building leadership teams and cross-functional collaboration with senior stakeholders.
• Strong knowledge of cyber risk management, governance, compliance and assurance principles.
• Experience with third-party and supply chain security risk management.

Responsibilities

• Define strategy and roadmap for Cyber Risk & Assurance aligned with business, technology and cyber objectives.
• Lead ISMS development, policies, and governance structures for consistent risk management.
• Oversee cyber risk, controls and risk-based decision making with transparency.
• Strengthen security policy, regulatory compliance and governance reporting.
• Drive third-party and supply chain security risk management and governance.
• Manage budgeting, resources and vendor strategy to support Cyber Risk & Assurance.

Skills

People management

Cyber risk management

Governance

Compliance

Stakeholder management

Job description

H&M Group seeks an experienced Unit Manager for Cyber Risk & Assurance to lead the function and drive cyber risk strategy across the global organisation. You will partner with business, technology and security teams to advance the ISMS, governance and assurance framework, while managing budgets and key vendor relationships.

You will influence senior stakeholders, shape policy, and champion a high‑performing, inclusive culture that delivers business value and resilience against evolving cyber