Head of Information Security

Randstad Digital is currently searching for a talented Head of Information Security to join the team of one of our prestigious clients.

Reporting to the CISO, the Head of Information Security (HoIS) is a key role in the
Cyber security leadership team. To succeed in this role, you will need to enjoy a green
field experience and the challenges of building and leading a small “centre of
excellence” information security and risk team. The team will set a new bar for
information security and risk management in a global manufacturing organisation.

Essential skills

- Leadership and management capabilities
- Ability to communicate complex technical information to a range of audiences.
- Strategic thinking
- Business acumen
- Problem-solving

Purpose of the role

The HoIS is responsible for delivering information/cyber security risk management and
governance processes and ensuring effective integration and alignment with the
HellermannTyton Data Protection, Operational Risk, and Internal Audit functions.
An additional important function of the HoIS is to oversee and direct the Security
Operations function on behalf of the CISO, including direct management and
accountability for the performance of any service providers involved.
The HoIS is responsible for the development and maintenance of the organisation’s
technology related policy portfolio and associated guidelines. Importantly this includes
actively working to embed those policies across the organisation.
A further key responsibility for the Head of Information Security is to lead and supervise
the Security Operations function on behalf of the CISO. This includes providing direct
oversight and holding accountability for the performance and effectiveness of all service
providers engaged in delivering security operations.
The HoIS is also tasked with developing and maintaining the organisation’s portfolio of
technology-related policies and accompanying guidelines. Crucially, this involves
proactively embedding these policies throughout the organisation to ensure consistent
adoption and compliance.

responsabilidades chave

To deliver the optimal outcomes for the HoIS will partner with internal
and external providers including executives and managers across different business
and departments, third-party vendors, and thought leaders in the wider industry.

Core responsibility areas.

Governance, Risk and Compliance
Supply Chain risk.
Business Cyber Security awareness
Security Operations
Incident Management

Policy and Standards

Policies: Develop and maintain security policies, procedures, and standards that
govern all aspects of information security at HellermannTyton.
Compliance: Ensure compliance with the relevant security regulations and
industry standards (e.g., PCI DSS, GDPR, TISAX, NIS2).
Policy Implementation: Oversee the implementation and enforcement of
security policies across all global businesses and locations.
Training: Ensure employees are trained on security policies and procedures to
raise awareness and encourage responsible data handling.
Risk management
Risk program: Develop, implement, and monitor a strategic, comprehensive
enterprise information security risk management program.
Risk management: Work directly with the business units to facilitate risk
assessment and risk management processes.
Awareness: Partner with business stakeholders across the company to raise
awareness of risk management concerns.
Supply Chain: Develop, implement, and maintain a supply chain cyber security
risk management framework for the enterprise.

Data Governance and Compliance

Data Security: Partner with legal and compliance teams to understand data
privacy regulations and translate them into actionable data security practices.

Head of Information Security Role Profile

Internal

- Data Governance: Develop and maintain data governance policies and
procedures for data ownership, access, usage, and retention.

Other responsibilities
Framework: Develop and enhance an information security management
framework and maintain an effective ISMS.
Collaborative working: Understand and interact with related disciplines through
design authorities and direct working relationships to ensure the consistent
application of policies and standards across all technology projects, systems, and
services.
Awareness: Foster a culture of security awareness and responsibility within the
business.

competências

- Experience: Minimum of 4 years of experience in IT Security, Governance, Risk
and Compliance, IT Audit with proven experience in the delivery of risk and
compliance assessments
Industry Knowledge: Extensive experience in the manufacturing sector,
understanding the unique challenges and regulatory requirements.
Technical Expertise: Proficient in cybersecurity frameworks (e.g., ISO, SOX,
TISAX, NIST, NIS2, CIS), risk management, incident response, and threat
intelligence.
Documentation: Strong documentation skills to contribute to security policies,
processes, and procedures and to produce risk assessment reports, findings,
and recommendations
Ground Up: Experience in building and leading high-performing information
security teams from the ground up.
Technology: Strong understanding of cloud computing, virtualisation,
networking, and emerging technologies.
Certifications: Relevant certifications such as CISSP or CISM, are desirable but
not mandatory. A willingness to get involved and roll your sleeves up is
mandatory.

Skills and Attributes:
Leadership: Strong leadership and team management skills, with the ability to
inspire and motivate.

principais benefícios

Competitive salary and benefits
Flexible work environment with a focus on work-life balance.
True Impact on the company development and culture;