Cyber Security Unit Manager - Cyber, Risk & Assurance

Job Description As Unit Manager for Cyber Risk & Assurance, you will lead H&M Group’s capabilities for cyber risk management, governance, compliance and assurance, playing a key role in strengthening the organisation’s security, resilience and ability to manage cyber risk in line with its risk appetite and regulatory obligations. As a member of the Cyber Security Leadership Team reporting to the CISO, you will share accountability for the overall cyber security strategy, priorities and long-term development of the Cyber Security function. Working closely with leaders across business, technology and cyber security, you will help shape outcomes that balance business objectives, security needs and risk management across H&M Group. You will provide strategic leadership for H&M Group’s Cyber Risk & Assurance capability, bringing together Cyber Security Frameworks, Supply Chain Security Risk and Security Control Assurance. Through your leadership, you will drive the continued evolution of cyber risk management and control assurance. WHAT YOU WILL DO Lead the strategic direction, maturity and long-term development of H&M Group’s Cyber, Risk & Assurance capability, defining and evolving the strategy, roadmap and operating model in alignment with business, technology and cyber security objectives. Contribute as a member of the Cyber Security Leadership Team to the overall cyber security strategy, priorities and long-term capability development. Drive the continued development and maturity of the Information Security Management System (ISMS), including frameworks, policies and governance structures that enable consistent and effective management of cyber risk across H&M Group. Provide oversight and assurance of cyber security risks and controls, promoting transparency, accountability and effective risk-based decision-making. Strengthen H&M Group’s approach to security policy and compliance, regulatory requirements, security control assurance and governance reporting. Drive the continued development of third-party and supply chain security risk management, ensuring risks are identified, assessed and managed through effective governance and oversight. Lead budgeting, resource and investment planning, vendor strategy and prioritisation to support Cyber Risk & Assurance and wider cyber security objectives. Foster a high-performing, collaborative and inclusive culture focused on strong accountability, continuous improvement and business value. Leadership as a Unit Manager As a Unit Manager and member of the Cyber Security Leadership Team, you provide strategic leadership for your unit while contributing to the overall direction and development of the Cyber Security function. You develop high-performing leadership teams, drive organisational effectiveness and capability development. You demonstrate enterprise leadership by collaborating across the business, influencing senior stakeholders and supporting decisions that create value beyond your own unit. WHO YOU ARE We are looking for someone with: 8+ years of people management experience in cyber security, technology risk, governance, compliance, assurance or a closely related field. Proven experience leading enterprise-scale cyber risk, governance, compliance or assurance capabilities in a complex global organisation. Proven experience leading through managers and developing high-performing leadership teams, with accountability for a multidisciplinary organisation and its outcomes. Experience as a member of a senior cyber security, technology, risk or enterprise leadership team, contributing to shared strategy, priorities, investment decisions and organisational outcomes beyond your own area of responsibility. Strong knowledge of cyber security risk management, governance, compliance and assurance principles, methodologies and operating models. Strong knowledge of security frameworks, policies, standards and controls, and experience translating regulatory and internal r