Information Security Strategy & Governance Lead

Information Security Strategy & Governance Lead


Mission and context
In this role you will drive the Group-wide information security strategy and provide guidance and governance of all information security aspects in Volvo Group. You will be a trusted advisor to senior business and technology stakeholders and use your broad knowledge of security strategies, directives, and processes to enable TD/BA/GFs to understand and meet information security requirements. It is essential that you interface with core business functions and technology teams to identify the required future state and roadmap.


You will further be responsible to consolidate and provide transparency of the Group-wide information security budget, including reports to executive management.


The successful candidate reports directly to the Vice President Information & Cybersecurity.


Main Responsibilities
Own and drive development of Group-wide information security strategy
Own and manage Group-wide information security policies, directives, and security governance across all Volvo Group ecosystems (IT, OT, and Product)
Lead coordination of policy & directive review processes
Own and manage Group-wide information security control framework working with multiple parties across Internal Control, Group Privacy, Group Security and Group Digital & IT
Interface closely with the controls testing & assurance team within Group Security to provide context to the development of appropriate control testing methodologies
Engage with stakeholders across Volvo Group to raise awareness on information security directives, control framework, future ambition, and strategic outlook
Interface with Group Digital & IT as well as TD/BAs to ensure budget transparency across all information security activities within Volvo Group
Plan and submit budget for resources required to drive Group Security's agenda, maturity ambition and to maintain appropriate information security governance across all ecosystems (IT/OT and Product)



Requirements and Qualifications
Master's degree in Information technology, cybersecurity, or related field
7+ years of advanced IT skills with a high level of information security experience & expertise
5+ years in an information security role and at least two years in a supervisory capacity
Excellent analytical skills, and the ability to manage multiple projects simultaneously under strict timelines
Strong knowledge of information security principles, frameworks and best practices and the ability to translate and articulate those into clear and concise information security directives
Strong presentation skills, both creating and presenting comprehensive content to senior executives



Industry certification/qualification
CISA, ISSMP, TOGAF, SABSA

The position is open now and will be contracted as soon as possible. We will start screening as applications arrive, so don’t hesitate to send yours.


For more info please contact Thomas de Neergaard, SVP Group Security, CSO & CISO, thomas.de.neergaard@volvo.com


Kindly note that due to GDPR, we will not accept applications via mail. Please use our career site.