Head of Cyber Defence

H&M Group is transforming the way it addresses the continuously evolving and complex cyber security threats and risks. To do this we have a Tech Centre focused solely on managing Cyber Security for all our brands and majority investments.  

Within this Cyber Security Tech Centre, we have a Cyber Defence Center (CDC) that is a key security function at H&M Group, which aims to detect and respond to threats to our data or technology systems, 24 x 7.  The CDC has 3 teams located both in Stockholm and India, and consists of Cyber Defence Analysts, Attack Surface Reduction Analyst and Cyber Defence Engineers. The CDC also leverages the best-in-class security technology and security providers. 

This role reports to the Chief Technology Risk Information Officer (CISO). 

Responsibilities: 

• Lead and manage the Cyber Defence Center, ensuring effective coordination and collaboration among cyber defence teams. 
• Develop and implement comprehensive cyber security strategies to protect the organization's digital assets. 
• Provide leadership and technical guidance to managers of cyber defence teams, fostering a culture of continuous improvement and innovation. 
• Enable strong organizational health by making sure that your employees prioritize both deliveries as well as own competence development. 
• Oversee the identification, assessment, and mitigation of cyber threats and vulnerabilities. 
• Ensure compliance with relevant cyber security regulations and standards. 
• Own and manage the cyber incident response and recovery processes, including coordination with stakeholders. 
• Monitor and analyze cyber security trends and emerging threats to proactively address potential risks. 
• Collaborate with other departments to integrate cyber security measures into business processes and initiatives. 
• Prepare and present regular reports on the status of cyber security initiatives to senior management. 
• Manage the units’ budget and monitor its financial effectiveness. 
• Formal staff responsibility, including salary review, performance dialogues and support in individual development plans and competence needs. 
• Contribute operationally, where necessary.