PSA Group is seeking an experienced cybersecurity governance professional to strengthen group-wide governance, risk and assurance practices across its global portfolio of businesses. The role will focus on clear policies, consistent risk oversight, effective assurance and concise management reporting.
The successful candidate should bring strong cybersecurity governance experience and sufficient awareness of IT, OT, cloud and AI environments to engage specialists and guide governance decisions. Deep technical expertise across every domain is not required.
Purpose
Lead and strengthen cybersecurity governance, risk management and assurance across PSA Group, translating cyber risks into practical business decisions and consistent group-wide requirements
Key Responsibilities
Governance and Policy
- Lead the development and continuous improvement of PSA Group's cybersecurity governance framework.
- Develop, review and maintain cybersecurity policies, standards, guidelines and control requirements.
- Oversee policy adoption, compliance monitoring, policy exceptions and risk acceptance processes.
Cybersecurity Risk Management
- Establish and maintain a consistent group-wide approach to cybersecurity risk management.
- Guide cybersecurity risk assessments for major business and technology initiatives, drawing on technical specialists where needed.
- Maintain oversight of key cyber risks, treatment plans, residual risk acceptance and escalation of significant issues.
- Translate cybersecurity risks into clear business implications and practical recommendations for decision-makers.
Assurance and Maturity Improvement
- Oversee the Global Cybersecurity Assurance Programme and coordinate control and maturity assessments across business units.
- Track agreed remediation actions and report assurance outcomes, recurring gaps and improvement priorities to management.
- Drive practical initiatives that improve cybersecurity maturity and consistency across the Group.
Strategy and Programme Governance
- Support the development and review of cybersecurity strategies, roadmaps and masterplans.
- Provide governance oversight for strategic cybersecurity programmes, including decisions, milestones, dependencies, risks and reporting.
- Define and monitor meaningful governance metrics, key performance indicators and key risk indicators.
Stakeholder and Management Engagement
- Prepare concise dashboards, decision papers and management updates for cybersecurity governance forums and senior leadership.
- Coordinate business units, regions, technology teams and risk functions to align priorities and implementation outcomes.
- Communicate requirements clearly and support stakeholders in applying governance processes in a practical, risk-based manner.
Experience and Competencies
- Minimum 10 years of cybersecurity experience, with at least 5 years in cybersecurity governance, risk, compliance, assurance or a closely related discipline.
- Practical experience developing or implementing cybersecurity governance frameworks, policies, standards or control requirements.
- Sound knowledge of cybersecurity risk management, assurance and maturity improvement approaches.
- Ability to engage senior stakeholders, facilitate governance decisions and explain technical risks in clear business terms.
- Working knowledge of cybersecurity considerations across IT, OT, cloud and AI.
- Experience in a large, complex, multinational, critical infrastructure, maritime, logistics or transportation environment would be advantageous.
- Experience coordinating cross-functional or cross-regional initiatives would be advantageous.
Qualifications And Skills
- Degree in Computer Science, Information Security, Engineering, Risk Management, Business or a related discipline, or equivalent relevant experience.
- Practical familiarity with recognised cybersecurity and risk frameworks (eg ISO, NIST, ISA/IEC, etc)
- Strong policy & governance documentation, analytical, presentation, facilitation and stakeholder management skills.
- Good programme governance capability, with the ability to establish clear outcomes, ownership, milestones and reporting.
- Relevant professional certifications will be an advantage.
Personal Attributes
- Clear, credible and concise communicator.
- Practical and collaborative, with the judgement to balance governance rigour and business needs.
- Able to work effectively across functions, business units, regions and levels of seniority.
- Organised, analytical and comfortable managing changing priorities.
- Willingness for occasional travel when required
