Head of Cyber Security

This position has been created to further strengthen the Group’s Cyber Security capabilities at a critical time of increased digital and operational complexity. With a growing focus on Operational Technology (OT) and the integration of IT and OT cyber security frameworks, the role requires a highly experienced senior leader who can operate at Group level and drive maturity, alignment, and execution.

Based in Luxembourg, the role will work closely with the existing Cyber Security leadership and teams to advance the Group’s cyber security strategy, operating model, and delivery capabilities, ensuring a strong and sustainable security posture globally.

Your main accountabilities:

• Defining and implementing robust OT Cyber Security policies, processes, and a clear technology roadmap
• Partnering with the Luxembourg government to deliver an agreed OT Cyber Security Center of Excellence (CoE) roadmap over the next two years
• Driving the integration of IT and OT Security Operations Centers (SOC) into a single, coherent global operating model
• Increasing the adoption and consistency of IT Cyber Security standards across Europe
• Strengthening collaboration and communication between regional cyber teams in Europe and Group-level cyber functions
• Enhancing execution capability, prioritization, and delivery discipline across the Cyber Security organization
• Ensuring a strong and sustainable Cyber Security and Audit posture, meeting Group standards and external requirements

You will lead a workforce of around 100 individuals, including direct reports, contractors, and segment- or cluster-based team members.

You will need:

• A Master’s degree
• 10 to 15 years of experience
• Experience in Senior level position
• Strong relationship with business partners
• Prior CISO experience needed
• Language skills: English (excellent level). Any other European language is a plus.
• Proven experience engaging with VP- and Management Committee-level stakeholders and leading large-scale Cyber Security programs across multiple functional areas

You should be used to work in an international context, in complex/sensitive/multi-stakeholder environment. Travel to India and various AM locations will be required.