BAT is evolving at pace into a global multi-category business. With products like VELO, VUSE and GLO we are on a mission to decrease the health impact of our industry
To achieve our ambition, we are looking for colleagues who are ready to Be The Change. Come, join us on this journey!



Your key responsibilities will include:

• Be the 1st point contact for cyber security matters in the Direct Reporting Business Unit (DRBU) and focus on continuous monitoring of security vulnerabilities.
• Establish and execute security remediation plan for infrastructure, hardware, and applications in line with business proprieties and Information & Digital Technology (IDT) leadership agenda. Track progress, overview budget and act as owner for all security remediation for DRBU.
• Maintain assets baseline in VMS and Balbix (IP ranges, hardware and any network device) & monitor application inventory in internal tool (Lean IX) is up to date.
• Deliver aligned cyber security KPIs in DRBU. Coordinate and execute actions needed to be on target.
• Risk assessments for projects coming from DRBU. Track all internal process requests for application evaluation (AURA) (security assessment work for new applications and technologies) for DRBU. Reassessments of risks after agreed time, to ensure continuous cyber compliance.
• Management of cyber risk with appropriate DRBU stakeholders.
• Collaborate with IT teams to ensure the implementation of secure network infrastructure and systems, as well coordinate with local IT representatives wherever necessary and functional Information & Digital Technology (IDT) teams for applications security remediation.
• Provide training material and awareness content for DRBU, prepare executive level updates on monthly basis.
• Be the Cyber focal point to support Cyber Incident response team with information and DRBUs contacts. Required during incidents and investigations.

What are we looking for?
Essential Experience:

• Degree in Computing Science or related domains.
• At least 2+ years of professional experience in cyber security with a record of increasing scope and responsibility.
• 3+ years professional experience in IT services: Change management, Incident management, IT asset management, Service request management.
• Experience managing and communicating with business partners on different levels of the organization.
• Ability to translate technical language into readily understandable language for business users.
• Experience assessing cyber risks of projects, vendors, and technologies & understanding of cyber security management, technologies, architecture, and audits.
• Project Management experience in cyber security or IT.
• Business fluent language skills in English
• ITIL Certificate

Technical, Functional and Leadership Skills:

• Knowledgeable of cyber security aspects related to networking, application development, ops, incident response, 3rd party vendor management and OT.
• End-2-end cyber security knowledge in different business areas (manufacturing, finance, marketing / e Commerce, HR, legal, supply chain, sales / trade, physical security).
• Understanding cloud and Saa S configuration management and risk reduction (focus on Azure and AWS) and how to protect and detect potential threats in those environments.
• Ability to think clearly, prioritize and make decisions under time-sensitive and high-pressure conditions.
• Business acumen, ability to articulate both businesses, commercial and technical ideas clearly and simply.
• Familiarity with network and system administration, including configuring and maintaining secure network infrastructure.
• Understanding of encryption technologies, secure coding practices, and security architecture design.
• Understanding of configuration for network devices, security tools, such as firewalls, intrusion detection systems, and antivirus software.

Beneficial:

• Budget and resource planning: provide relevant and validated input and forecast to plan and execute projects and programs.
• Law enforcement or corporate investigations experience.
• Audit / Regulatory experience.

WHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.
Collaboration, inclusion and partnership underpin everything we do here at BAT. We are looking forward to enabling every individual to thrive, regardless of gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, veteran status, perspectives and thinking styles. We know that embracing talent from all backgrounds is what makes us stronger and best prepared to meet our business goals.
We see the career breaks as opportunities not obstacles. Through The Global Returners program, we support professionals looking to restart their careers after an extended absence from the workforce (e.g. time out caring for family, parental leave, national service, sabbatical and/or starting an own venture).
Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here.
If you require any reasonable adjustments or accommodations to help you perform at your best during the recruitment process, you are encouraged to notify us. We are fully committed to support you by making appropriate arrangements for you to demonstrate your full potential.