Cyber Security & IDT Compliance Manager CE (f/m)

Your responsibilities

• Lead, coach and develop the team, setting clear priorities, allocating work and ensuring consistent delivery across cyber security governance, compliance and vulnerability and patching coordination.
• Own and drive the Central Europe cyber security strategy, roadmap and policies, ensuring alignment with local, regional and global priorities.
• Deliver and maintain the CE IDT compliance framework and ways of working, aligned with Control Navigator controls; oversee annual Control Navigator, Risk Register and ERM exercises.
• Cascade and monitor cyber security controls, support and advise team members on risk mitigation, and call out material risks.
• Ensure transparent reporting and oversight of vulnerability, IDT IRI, cyber security incident and IRM trackers, including remediation progress, exceptions and material issues.
• Act as the CE cyber security lead, advising and influencing IDT, business, global and regional participants on cyber security priorities and controls.
• Oversee audit preparation and coordination through the team, oversee support for cyber security assessments and SAT approvals.
• Oversee vulnerability and patching coordination within the defined CE CBU and OBU scope, ensuring site/EM-level reporting, status tracking, remediation plans, exceptions and documentation.
• Own and prioritise cyber security projects and awareness campaigns, providing direction and oversight of delivery through the team and relevant partners.

Our requirements

• Degree in Information Technology, Cyber Security, Risk Management or a related field, or equivalent relevant professional experience.
• Significant experience in cyber security governance, technology risk, IDT compliance, IT audit or a related field within a complex, multinational organisation.
• Proven people-management experience, with the ability to lead, coach and develop a geographically or functionally diverse team.
• Strong knowledge of security, risk and control frameworks such as ISO 27001, NIST, COBIT, ITIL and SOX, together with relevant regulatory expectations.
• Practical experience in cyber and technology risk assessments, internal controls, compliance monitoring, audit coordination and remediation management, including cyber security strategy and roadmap delivery.
• Understanding of vulnerability and patching management processes, including reporting, risk analysis, remediation tracking, exceptions and coordination with technical teams and vendors.
• Strong analytical, problem-solving skills, with the ability to prioritise across multiple markets.
• Excellent stakeholder-management and communication skills, with the ability to explain technical risks clearly, provide constructive challenge and influence senior stakeholders.
• Fluent English is mandatory and Another Central European market language would be an advantage.

What we offer

• We offer a market leading annual performance bonus (subject to eligibility)
• Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentives
• Your journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You'll have access to online learning platforms and personalized growth programs to nurture your leadership skills
• We prioritise continuous improvement within a transformative environment, preparing for ongoing changes

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• fruits
• integration events
• no dress code
• parking space for employees
• employee referral program

The Cyber Security & IDT Compliance Manager CE owns and drives the Central Europe cyber security strategy, roadmap and policies, aligned with local, regional and global priorities, BAT standards and applicable regulatory requirements.

The role leads a team of three, delivers the IDT compliance framework and ways of working, and oversees cyber security governance, risk and compliance and vulnerability and patching coordination. Acting as the CE cyber security point of contact, the role influences partners, prioritises projects and awareness campaigns, monitors controls and brings up material risks.

British American Tobacco

BAT is evolving at pace into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.

To achieve our ambition, we are looking for colleagues who are ready to join us on this journey! Tomorrow can’t wait, let’s shape it together!

This is how we work