• Define and drive the implementation of practices and processes across the business.
• Target awareness activities for business-specific security risks and threats for business-critical roles.
• Monitor business-specific security regulations.
• Identify risks and translate them into actionable items.
• Monitor and assess security division units’ maturity against targets.
• Support employees in security topics and support training.
• Manage customer requests, supply chain security, and other business-security needs.
• Update unit-level security risk map and identify and manage security-related business risks based on evolving business, threat, technology, and regulation landscape.
• Maintain security services portfolio for IT and OT environments based on security baseline and business needs.
• Coordinate business-specific security incident management.

• Strong competence in information security management in industrial environment.
• Excellent leadership and coordination skills.
• Strong communication and networking skills.
• Ability to monitor business-specific security regulations and participate in relevant industry-specific security networks.
• Proficiency in risk identification and translation to actions.

• A minimum of 5 years of experience in information security management or a related field.
• Proven track record of leading security initiatives and managing security programs.
• Experience in developing and implementing security policies, standards, and procedures.
• Familiarity with industry-specific security regulations and standards like NIS2 and ISO27001.
• Strong analytical and problem-solving skills with the ability to assess and manage risks.
• Experience in coordinating with external security service providers and managing security incidents.
• Knowledge of security technologies and tools, including EDR/NDR/XDR solutions, SIEM, SOC, and risk management tools.