Key responsibilities

• Define and enforce Group-wide cybersecurity policies and standards
• Own the Group security posture across subsidiaries
• Lead the Security Operations Centre and incident response capability
• Oversee vulnerability management, penetration testing and application security
• Establish security-by-design across technology architecture and delivery
• Lead security architecture across cloud, infrastructure, network, endpoints and emerging technologies
• Own cyber resilience and disaster recovery planning
• Manage outsourced cyber security services
• Lead security audits, regulatory assurance and risk management
• Provide executive and Board-level reporting on cyber risk
• Build and lead the wider security organisation