Cyber Security & IDT Compliance Manager CE (f/m)

Your responsibilities

• Lead, coach and develop the team, setting clear priorities, allocating work and ensuring consistent delivery across cyber security governance, compliance and vulnerability and patching coordination.
• Own and drive the Central Europe cyber security strategy, roadmap and policies, ensuring alignment with local, regional and global priorities.
• Deliver and maintain the CE IDT compliance framework and ways of working, aligned with Control Navigator controls; oversee annual Control Navigator, Risk Register and ERM exercises.
• Cascade and monitor cyber security controls, support and advise team members on risk mitigation, and call out material risks.
• Ensure transparent reporting and oversight of vulnerability, IDT IRI, cyber security incident and IRM trackers, including remediation progress, exceptions and material issues.
• Act as the CE cyber security lead, advising and influencing IDT, business, global and regional participants on cyber security priorities and controls.
• Oversee audit preparation and coordination through the team, oversee support for cyber security assessments and SAT approvals.
• Oversee vulnerability and patching coordination within the defined CE CBU and OBU scope, ensuring site/EM-level reporting, status tracking, remediation plans, exceptions and documentation.
• Own and prioritise cyber security projects and awareness campaigns, providing direction and oversight of delivery through the team and relevant partners.

Our requirements

• Degree in Information Technology, Cyber Security, Risk Management or a related field, or equivalent relevant professional experience.
• Significant experience in cyber security governance, technology risk, IDT compliance, IT audit or a related field within a complex, multinational organisation.
• Proven people-management experience, with the ability to lead, coach and develop a geographically or functionally diverse team.
• Strong knowledge of security, risk and control frameworks such as ISO 27001, NIST, COBIT, ITIL and SOX, together with relevant regulatory expectations.
• Practical experience in cyber and technology risk assessments, internal controls, compliance monitoring, audit coordination and remediation management, including cyber security strategy and roadmap delivery.
• Understanding of vulnerability and patching management processes, including reporting, risk analysis, remediation tracking, exceptions and coordination with technical teams and vendors.
• Strong analytical, problem-solving skills, with the ability to prioritise across multiple markets.
• Excellent stakeholder-management and communication skills, with the ability to explain technical risks clearly, provide constructive challenge and influence senior stakeholders.
• Fluent English is mandatory and Another Central European market language would be an advantage.

What we offer

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• fruits
• integration events
• no dress code
• parking space for employees
• employee referral program

British American Tobacco