CYBER SECURITY & TECHNOLOGY RISK SENIOR MANAGER

Position Summary:

The Cyber Security & Technology Risk Lead is responsible for leading Greenfeed Group’s cyber security, technology risk and compliance program.

The role oversees security governance, architecture, monitoring, incident response, technology risk, IT controls and compliance across infrastructure, applications, cloud, data, AI and operational technology environments.

The position works under a federated security model, where Infrastructure, Applications, Data & AI, OT & Automation and system owners are responsible for implementing and operating relevant security controls.

Key Responsibilities:

• Develop and execute the Group’s cyber security strategy, roadmap, policies and standards.
• Lead cyber security architecture reviews and ensure security requirements are embedded in technology projects.
• Oversee SOC, SIEM, EDR, threat monitoring and cyber incident response.
• Establish vulnerability management, penetration testing and remediation governance.
• Maintain the Technology Risk Register and coordinate risk assessments across IT, cloud, data, AI, OT and third parties.
• Define and oversee ITGC, cyber security controls, risk acceptance and security exception processes.
• Coordinate technology audits, compliance reviews and remediation of audit and security findings.
• Define governance requirements for IAM, PAM, access reviews and segregation of duties.
• Oversee third-party technology and cyber security risk assessments.
• Establish governance for business continuity, disaster recovery and cyber resilience.
• Define security requirements for factories, farms, OT, PLC, SCADA, IoT and edge devices.
• Manage SOC, MSSP, cyber security vendors and related service performance.
• Lead and develop the Cyber Security and Technology Risk team.

Qualification and Experience:

• Bachelor’s degree in Information Technology, Cyber Security, Computer Science or a related field.
• Preferred Certifications CISSP, CISM, CISA, CRISC, ISO 27001 or CCSP are preferred.
• At least 8 years of experience in Cyber Security, Technology Risk, IT GRC, IT Audit or related areas.
• At least 3 years of team or program leadership experience.
• Practical experience in several of the following areas:
  • Cyber security governance and strategy.
  • SOC, SIEM, EDR and incident response.
  • Vulnerability management.
  • IAM and PAM.
  • ITGC, technology risk and compliance.
  • Cloud, application or data security.
  • Business continuity and disaster recovery.
  • Third-party technology risk.
• Familiarity with frameworks such as ISO 27001, NIST CSF, CIS Controls or COBIT.
• Experience in manufacturing, agriculture, food, logistics or OT environments is an advantage.

Competencies:

• Strong understanding of cyber security and technology risk.
• Ability to translate technical risks into business impact.
• Strong stakeholder, vendor and team management skills.
• Practical and risk-based decision-making.
• Strong communication, influencing and incident leadership capabilities.
• High integrity, ownership and accountability.