The Director of Cybersecurity Strategy and Governance reports directly to the CISO and serves as a senior advisor on cybersecurity strategy, governance, risk, and program execution, leading the Governance, Risk, and Compliance organization.
Responsibilities
Develop the company’s cybersecurity strategy and turn it into a clear roadmap
Maintain the cybersecurity roadmap
Plan and lead regular cybersecurity leadership meetings
Serve as the main cybersecurity contact for the shared business PMO
Set and enforce common standards for cybersecurity planning and reporting
Requirements
Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Risk Management, Business, or a related field
Play a key role in shaping an enterprise-wide cybersecurity architecture vision, strategy, and roadmap, ensuring consistent security principles, architectural patterns, and guardrails across multiple technology domains.
Locations (2)
Stockholm, Stockholm County, Sweden
Solna, Stockholm County, Sweden
Compensation
An annual wellness allowance of 3,500 SEK to support your health and wellbeing
Responsibilities
Define and drive enterprise-wide cybersecurity architecture strategy and roadmap
Develop security reference architectures, blueprints, and architectural guardrails
Provide architectural direction across Data & Information Security, AI Security, Threat Detection & Response, and Infrastructure & Platform Security
Translate strategic cybersecurity objectives into actionable architectural guidance
Collaborate with Enterprise Architecture, Cybersecurity Engineering, and cross-functional stakeholders
Supportare organizzazioni nazionali e internazionali nel rafforzamento di resilienza, trasparenza, governance e conformità normativa, focalizzato su governance, risk & compliance, cybersecurity e ESG.
Compensation
Per questa opportunità è previsto un inserimento con contratto al 3° livello CCNL Commercio con una retribuzione indicativa tra 29.500€-37.000€, la cui determinazione finale sarà definita anche in base alla valutazione delle tue competenze ed esperienze pregresse.
Responsibilities
Supportare la progettazione e implementazione di framework di Cyber Governance
Eseguire attività di Cyber Risk Assessment e valutazioni del livello di maturità della sicurezza informatica
Analisi di conformità rispetto a normative e standard quali NIS2, DORA, ISO/IEC 27001, GDPR, CIS Controls, NIST Cybersecurity Framework
Definire e revisionare le policy, procedure e standard di sicurezza
Supportare l'implementazione e il monitoraggio di programmi di Cyber Compliance
Leads the Global Cybersecurity Services portfolio, strategy, and cybersecurity training and awareness functions in support of the Chief Information Security Officer (CISO).
Responsibilities
Translates CISO direction and enterprise risk priorities into an integrated strategy, funded roadmap, and measurable program outcomes
Leads portfolio prioritization and delivery governance
Owns training and awareness that strengthens secure behaviors across the business
Establishes and maintains influential working relationships at all levels necessary to advance cybersecurity strategy and enterprise risk outcomes
Leads development, refresh, and communication of the cybersecurity strategy and operating plan for ciso approval
Requirements
Bachelor's degree in Information Security, Computer Science, or a related field
Nice to have: Leading complex cybersecurity or technology portfolio
Nice to have: Translating business strategy and cyber risk into multi-year roadmaps
Nice to have: Building and leading multidisciplinary teams
Plan, design, install and maintain the bank’s network and Internet service.
Plan, install and maintain the bank’s security service as per Bank’s Cybersecurity strategy and programme.
Ensure the bank’s network meet the predefined service level.
Manage the network related tasks and resources in setting up the development/production network according to the development plans and implementation plans.
Identify network performance improvement and cost saving opportunities and propose solution accordingly.
Lead and develop the IT and Cyber Security function for Ferrovial BAM JV across the UK & Ireland, ensuring alignment with corporate standards and managing cybersecurity strategy, governance, risk, and incident response.
Responsibilities
Lead and develop the IT and Cyber Security function in line with business, project and operational requirements.
Define and implement the UK & Ireland IT and Cyber Security strategy, ensuring alignment with corporate standards across business units, subsidiaries, projects and joint ventures.
Establish and maintain appropriate cybersecurity governance, controls, policies and standards, ensuring they remain effective throughout the lifecycle of IT systems, digital products and services.
Manage the setup, implementation and ongoing operation of project IT and cybersecurity infrastructure, including networks, cloud environments and associated technology services.
Oversee cybersecurity risk management, identifying vulnerabilities and ensuring appropriate mitigation measures are implemented and monitored.
Requirements
Master’s degree in Computer Science, Engineering, Information Technology or a related discipline, or equivalent professional experience.
Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
Responsibilities
Deliver client engagements focused on cyber risk and privacy, including assessments, gap analyses, roadmaps, and implementation projects.
Translate technical and regulatory requirements into pragmatic policies, standards, architectures, and operating procedures tailored to the client’s risk appetite.
Design and implement security controls aligned to frameworks such as ISO/IEC 27001, NIST CSF, CIS Controls, and industry regulations (e.g., FINMA circulars, DORA, NIS2).
Support clients in maturing capabilities across cloud security, identity and access management, data security (encryption, DLP), vulnerability and threat management, security monitoring, and incident response.
Assess third-party and supply chain cyber risk, define remediation plans, and help establish continuous assurance and vendor oversight processes.