← Toutes les offres
H&

Cyber Security Unit Manager - Cyber, Risk & Assurance

H & M Hennes & Mauritz GBC AB

Stockholm
Data/IT
Publié le 5 novembre 2026

Description du poste

Job Description As Unit Manager for Cyber Risk & Assurance, you will lead H&M Group’s capabilities for cyber risk management, governance, compliance and assurance, playing a key role in strengthening the organisation’s security, resilience and ability to manage cyber risk in line with its risk appetite and regulatory obligations. As a member of the Cyber Security Leadership Team reporting to the CISO, you will share accountability for the overall cyber security strategy, priorities and long-term development of the Cyber Security function. Working closely with leaders across business, technology and cyber security, you will help shape outcomes that balance business objectives, security needs and risk management across H&M Group. You will provide strategic leadership for H&M Group’s Cyber Risk & Assurance capability, bringing together Cyber Security Frameworks, Supply Chain Security Risk and Security Control Assurance. Through your leadership, you will drive the continued evolution of cyber risk management and control assurance. WHAT YOU WILL DO Lead the strategic direction, maturity and long-term development of H&M Group’s Cyber, Risk & Assurance capability, defining and evolving the strategy, roadmap and operating model in alignment with business, technology and cyber security objectives. Contribute as a member of the Cyber Security Leadership Team to the overall cyber security strategy, priorities and long-term capability development. Drive the continued development and maturity of the Information Security Management System (ISMS), including frameworks, policies and governance structures that enable consistent and effective management of cyber risk across H&M Group. Provide oversight and assurance of cyber security risks and controls, promoting transparency, accountability and effective risk-based decision-making. Strengthen H&M Group’s approach to security policy and compliance, regulatory requirements, security control assurance and governance reporting.