Senior Manager, Cybersecurity in City of Westminster

The Cybersecurity Senior Manager will play a key role in strengthening and maturing Innocent's cybersecurity capabilities by leading the delivery of the cybersecurity roadmap, driving security improvement initiatives, and embedding secure practices across the organization. This role combines technical cybersecurity expertise with leadership, program management, and stakeholder engagement. The successful candidate will be responsible for driving security engineering and operational security activities while ensuring that governance, risk, and compliance requirements are effectively managed. This role operates within The Coca-Cola Company's Global Cybersecurity function and works closely with security, technology, and business leaders across innocent, other wholly owned entities, and the broader Coca-Cola system to advance cybersecurity strategy, risk management, and security engineering capabilities.

Cybersecurity Strategy & Program Delivery

• Support the development and execution of Innocent's cybersecurity strategy and roadmap.
• Lead cybersecurity improvement programs and initiatives from concept through implementation.
• Drive the adoption of security best practices across technology and business teams.
• Identify opportunities to enhance security capabilities through process improvement, automation, and technology optimization.
• Track and report on cybersecurity objectives, milestones, risks, and performance metrics.
• Translate cybersecurity risks into business impact and actionable recommendations for leadership.
• Partner with business leaders to align cybersecurity investments with organizational objectives and risk priorities.
• Provide cybersecurity input into strategic initiatives, digital transformation programs, and third-party engagements.

Security Engineering & Technical Security

• Lead and support the implementation of security technologies and controls across cloud and on-premise environments.
• Partner with technology teams to promote secure architecture, secure development, and security-by-design principles.
• Manage and enhance cloud security capabilities, including cloud security posture management and security monitoring solutions.
• Support vulnerability management activities, including identification, prioritization, remediation tracking, and reporting.
• Provide technical guidance on cybersecurity standards, controls, and emerging security threats.
• Maintain awareness of evolving threat landscapes and recommend appropriate defensive measures.

Governance, Risk & Compliance

• Support cybersecurity governance activities, including policy, standards, and procedure development.
• Conduct and facilitate cybersecurity risk assessments and remediation planning.
• Support internal and external audits and cybersecurity assurance activities.
• Ensure compliance with applicable corporate policies, regulatory requirements, and industry standards.
• Contribute to third-party cybersecurity risk management processes where required.
• Produce meaningful reporting and metrics to communicate cybersecurity risks and programs effectiveness.

Stakeholder Engagement & Leadership

• Build strong relationships with business and technology stakeholders across Innocent and Coca-Cola.
• Influence secure decision-making through effective communication and risk-based recommendations.
• Act as a trusted cybersecurity advisor to project teams and business leaders.
• Provide leadership and direction for cybersecurity initiatives, coordinating resources across multiple teams.
• Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization.
• Provide leadership and coordination for cybersecurity incident response activities and major security events.
• Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting.

Additional Qualifications for a Competitive Advantage

• Experience within FMCG, manufacturing, supply chain, or consumer goods environments.
• Hands-on experience with Microsoft Azure security technologies.
• Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms.
• Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications are desirable.
• Experience supporting ISO 27001, NIST CSF, CIS Controls, or similar security frameworks. Experience working with third-party suppliers and cybersecurity assessments. Experience leading or supporting security incident investigations.

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what's possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.

#J-18808-Ljbffr