Head of Cybersecurity Operations

Descrição do trabalho

MAKE HISTORY WITH US! At PMI, we’ve chosen to do something incredible. We’re totally transforming our business and building our future on smoke‑free products with the power to deliver a smoke‑free future. With huge change comes huge opportunity. Wherever you join us, you’ll enjoy the freedom to dream up and deliver better, brighter solutions and you will have the space to move your career forward in many different areas and directions.
IT at PMI

PMI’s journey to a smoke‑free future implies a shift from a tobacco manufacturer to a science and technology‑based consumer‑facing organisation. Such a shift creates an abundance of unique and transformative IT projects to match all levels of skills and ambitions. You’ll feel like you’re working in a start‑up – with the freedom to shape and define the future of digital, but with the support and scope of a vast global business. You’ll get a chance to work with cutting‑edge technologies (e.g., Cloud, APIs, AI) as well as management practices (e.g., Agile, Design Thinking, Product Management). Our environment is fast‑paced and highly collaborative. If you want the freedom to find new ways to connect with consumers, there’s no better place to progress your career.
Joining Operations & R&D

Within IT, the Operations & R&D team is an experienced, nimble & expert team composed of multiple sub‑streams. The main purpose of the team is to lead the digital strategy and transformation of Operations and R&D functions through effective business partnering and conceptualising, delivering and supporting state‑of‑the‑art and secure IT technologies across the end‑to‑end value chain. When you join this team, you will work closely with the IT Operations and R&D leadership team and critical business stakeholders as a trusted technology partner to embed continuous innovation, work at speed and scale, develop your career in numerous directions in line with your aspirations and in a truly international and diverse context.
Purpose of this role

• The Director for IT Operations and R&D Security is looking for an experienced Head of Cybersecurity Operations who can design, build, and operate a new next generation Control Operation Centre within the 1st Line of Defence of IT Operations & R&D platforms. In addition to the IT environment, this role will also actively support the implementation and expansion of cybersecurity operations across the OT environment. This position reports directly to the Director for IT Operations and R&D and will be part of the cybersecurity leadership team.
• Key Responsibilities
• Prioritise, define, and orchestrate the execution of risk treatment strategy
• Develop and embed capabilities and controls across the cybersecurity value chain (Identify, Protect, Detect, Respond, and Recover) to effectively sustain cybersecurity initiatives
• Operate and monitor security controls in a continuous manner, on behalf of control owners in Product and Operations functions
• Support the Director for IT Operations and R&D Security with the development and implementation of a Cybersecurity Operations strategy and programmes, in alignment with the business goals of Product and Operations functions
• Together with the Director for IT Operations and R&D Security, lead and oversee the orchestration and execution of complex and strategic cybersecurity initiatives across Product and R&D functions
• Oversee the day‑to‑day activities of the cybersecurity operations team ensuring efficient control operations and testing
• Drive the implementation of operating model, processes, and procedures to transform the whole IT Product & R&D function in an effective 1st Line of Defence
• Support Operations and R&D functions in the change management to become an effective business 1st Line of Defence, with focus on product owners, project managers and technology SMEs (e.g., at Engineering Solutions, Product Engineering, Product Development IoT, in PMI plant shop floor)
• Work with strategic service providers to establish a cost‑effective 1st Line of Defence structure capable of delivering continuous control monitoring
• Drive convergence between IT and OT with the objective of mitigating cyber risk and improving operational efficiency
• Keep alignment with IT Platforms stakeholders to proactively implement security‑by‑design and privacy‑by‑design measures (people, processes, and tools)
• Perform active measurement and governance on the CISO metrics
• Connect information security initiatives to compliance and regulatory requirements, and oversee internal and external audits (e.g., FDA, CAD, FM Global) and Qualification and Validation activities in scope of GxP
• Perform active measurement and governance on the CISO metrics
• Connect infor