Director, Cyber Security (CISO)

Director, Cyber Security (CISO)

What you'll be part of

At CCEP, technology and cyber security play a critical role in enabling our business, protecting our people, customers and consumers, and supporting our ambitious transformation agenda.

As Director, Cyber Security (CISO), you will lead the strategic direction, development and execution of our enterprise cyber security capability. Reporting to the VP, Service Delivery & Security, you will help shape how CCEP protects its technology landscape across IT, OT, cloud, applications and digital services while supporting innovation and business growth.

This is a highly visible leadership role where you will work closely with senior stakeholders across the organisation, providing expert guidance on cyber risk, resilience and security strategy. You will lead a team of security professionals and partner with colleagues across Business Process Technology (BPT) and the wider business to drive a secure-by-design culture and strengthen our overall cyber security posture.

If you are passionate about leading high-performing teams, influencing strategic decisions and staying ahead of an evolving threat landscape, this is an opportunity to make a significant impact at a European scale.

What you will do

As our Director, Cyber Security (CISO), you will:

Lead our cyber security strategy

• Define and deliver CCEP's cyber security strategy and roadmap, ensuring alignment with business priorities, technology transformation and emerging threats.
• Act as CCEP's designated Chief Information Security Officer, providing enterprise-wide leadership and expertise.
• Advise senior leaders on cyber risk, security investment priorities and strategic decision making.
• Develop and report meaningful security metrics, risk indicators and maturity measures to executive stakeholders.

Strengthen cyber defence and resilience

• Lead our cyber defence capabilities, including monitoring, threat detection, incident response, crisis management and continuous improvement.
• Oversee Security Operations Centre capabilities, ensuring effective protection against evolving cyber threats.
• Lead executive cyber incident response activities during significant security events.
• Ensure security capabilities protect the confidentiality, integrity and availability of business-critical services and information.

Drive security architecture and engineering excellence

• Champion secure-by-design principles across technology initiatives and transformation programmes.
• Define the strategic direction for security architecture, engineering, application security and threat engineering.
• Oversee the effectiveness and continual optimisation of security platforms, controls and automation capabilities.
• Provide leadership on the secure adoption of emerging technologies, including AI-enabled solutions.
• Review and influence technology and solution designs to ensure security requirements are effectively addressed.

Enhance governance and risk management

• Partner closely with Security Governance & Assurance teams to strengthen risk management, compliance and audit readiness.
• Support the ongoing effectiveness of security controls, including those supporting SOX and regulatory requirements.
• Ensure security requirements are embedded across supplier relationships, third-party services and managed service providers.
• Drive remediation of security risks, control gaps and audit findings.

Lead people, partners and investment

• Build, inspire and develop a high-performing cyber security organisation.
• Create an environment of continuous learning, collaboration and technical excellence.
• Manage strategic relationships with security suppliers, partners and managed service providers.
• Oversee cyber security budget planning and investment decisions to maximise business value and risk reduction.
• Promote security awareness and a strong cyber security culture across CCEP.

What we expect from you

Experience and qualifications

You bring significant experience in cyber security leadership within complex, international organisations and have a proven track record of turning strategy into measurable outcomes.

You will have:

• Extensive experience in Cyber Security, Information Security, Technology Risk or related disciplines.
• Significant leadership experience in senior cyber security roles, ideally including CISO or Deputy CISO responsibilities.
• A degree in Information Technology, Cyber Security, Information Management, Business Administration or a related field.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CCSP, ISO 27001, COBIT or equivalent.
• Experience leading security operations, engineering, architecture, application security, cloud security and operational technology security functions.
• Proven experience managing large-scale programmes, budgets, suppliers and strategic investments.
• Strong experience partnering with risk, audit, compliance, privacy and legal stakeholders.
• Excellent written and verbal communication skills in English.

Technical expertise

You will demonstrate strong knowledge across:

• Enterprise cyber security strategy and operating models.
• Security architecture, Zero Trust and secure-by-design principles.
• Cloud, network, identity, application and OT security.
• Security operations, threat detection, incident response and cyber resilience.
• Modern security technologies including SIEM, EDR, XDR, SOAR and vulnerability management platforms.
• Industry frameworks and regulations such as ISO 27001, NIST, CIS Controls, SOX, GDPR and NIS2.

What will help you succeed

We're looking for a leader who can combine strategic thinking with operational excellence and bring others on the journey.

You will be:

• An inspiring and inclusive leader who develops people and builds high-performing teams.
• A strong influencer who can engage confidently with senior executives and a broad range of stakeholders.
• Commercially minded, balancing security, risk, cost and business outcomes.
• Collaborative, culturally aware and comfortable operating across international teams.
• Resilient, adaptable and able to navigate ambiguity and complexity.
• Passionate about continuous improvement, innovation and developing a strong security culture.