Director Information Security & Data Privacy

CEVT is an innovation centre for the future cars of the Geely Group with the purpose of being at the forefront of new developments in the automotive industry. Since 2013 CEVT has grown rapidly and now keeps some 2000 people busy. China Euro Vehicle Technology AB is a subsidiary of Zhejiang Geely Holding Group.

Would you like to be a part of, lead and develop CEVTs work on information security and privacy?  
We are now looking for a Director of Information Security and Privacy. In this position you will work both strategic and operational to lead our efforts in developing, implementing and managing the regulatory processes, tools, systems and people that are needed to prevent, detect, document and counter risks to our information assets, including personal data.
You will lead and manage a highly dedicated and competent team of 4 persons consisting of information security and privacy professionals, be a part of CEVTs legal department and report to the Senior Vice President of Legal.

Your main focus in this role:
You are responsible for aligning information security and privacy with business strategy to support CEVTs operational objectives, leading risk management activities, monitoring and reporting on progress and end-to-end collaboration cross-functionally and cross-organizationally to meet information security and privacy objectives.

Your focus in this role is also:
* To evangelize information security and privacy throughout the organization, making it a part of the company DNA.
* To ensure that information security and privacy is at a tactical as well as a strategic level, today and in the future.
* To set requirements, advise and follow-up on information security and privacy within the company.
* To develop and maintain integrated management frameworks and systems for information security and privacy, e.g. ISMS/PIMS.
* To lead information security and privacy risk management initiatives.
* To lead awareness strategies and conduct awareness raising activities and trainings.
* To establish systems, processes and metrics necessary to evaluate the effectiveness of controls and monitor, measure, test and report on effectiveness and efficiency.
* To develop and implement necessary controls for the prevention, detection, identification, analysis and response to information security incidents.
* To establish and implement necessary disaster recovery and business continuity plans.
* To otherwise be a superhero within information security and privacy.


Key attributes of our next colleague:
* To succeed in the role, we would like to see you having an academic degree or an equivalent combination of several years’ experience in managing and leading information security or privacy and relevant education and training.
* You are self-starter with little need for directions that is confident in your role as a leader. Over the years, you have developed leadership qualities and good communicative abilities.
* You are driven and forward thinking with the ability to make the necessary changes to meet today´s and future challenges. You are comfortable acting as a decision-maker, spokesperson and trusted adviser.
* You have high integrity and are comfortable with ongoing dialogue and collaboration with stakeholders at different levels within and outside the organization.
* You understand the needs of the organization and the importance of achieving necessary balance between business benefit and security/privacy and you have the ability to transform regulatory and business requirements into a functioning information security and privacy strategy.


Last application date: 2020-04-29. 
For questions about the position contact the hiring manager:
Tihua Huang, General Counsel and SVP Legal, tihua.huang@cevt.se,  +46 729 88 89 56.
For questions about the recruitment process contact the recruiter:
Kristina Larsson Djokovic, Senior Recruiter, +46 729 88 85 44.