Global Head of Cybersecurity

About the role

The Global Head of Cybersecurity will define and drive the organisation's worldwide cybersecurity strategy, standards and risk posture across multiple countries and business units. Reporting to senior executives, this leader will provide independent oversight while collaborating closely with Technology, IT and Engineering teams.

Key responsibilities

• Develop and maintain the global cybersecurity strategy, roadmap, policies and standards.
• Own the group cybersecurity risk register and ensure an effective security posture.
• Provide independent assurance that security controls operate effectively.
• Advise the Executive Committee, Audit Committee and Board on cyber risk.
• Lead major cyber incident response and act as Incident Commander.
• Oversee vulnerability management, penetration testing, red‑team exercises and security assessments.
• Set security requirements for cloud, corporate IT and operational technology (OT).
• Strengthen security across production sites, packhouses, cold storage, farming and other operational environments.
• Manage SOC performance, detection capability and incident response.
• Handle third‑party, supply‑chain and acquisition‑related cyber risk and ensure compliance with ISO 27001, NIST, GDPR and NIS2.

Required profile

• 12+ years of cybersecurity experience, including at least 5 years in a senior leadership role.
• Proven track record leading cybersecurity across multiple countries or business entities.
• Experience managing major cyber incidents such as ransomware attacks.
• Strong communication skills, able to explain cyber risk to board‑level audiences.
• Fluent English and comfortable working across diverse cultures.

Required skills

• ISO 27001 and/or NIST Cybersecurity Framework knowledge.
• Operational technology (OT/ICS) security expertise, preferably in manufacturing, agriculture, food or logistics.
• Cloud security, identity management, network security and vulnerability management.
• Experience with SOC operations, penetration testing, red‑team exercises.
• Third‑party risk management and regulatory compliance (GDPR, NIS2).
• Relevant certifications such as CISSP, CISM, CRISC; OT security certifications are a plus.