Cyber Security Unit Manager - Cyber, Risk & Assurance

Job Description

As Unit Manager for Cyber Risk & Assurance, you will lead H&M Group’s capabilities for cyber risk management, governance, compliance and assurance, playing a key role in strengthening the organisation’s security, resilience and ability to manage cyber risk in line with its risk appetite and regulatory obligations. 

As a member of the Cyber Security Leadership Team reporting to the CISO, you will share accountability for the overall cyber security strategy, priorities and long-term development of the Cyber Security function. Working closely with leaders across business, technology and cyber security, you will help shape outcomes that balance business objectives, security needs and risk management across H&M Group. 

You will provide strategic leadership for H&M Group’s Cyber Risk & Assurance capability, bringing together Cyber Security Frameworks, Supply Chain Security Risk and Security Control Assurance. Through your leadership, you will drive the continued evolution of cyber risk management and control assurance. 

WHAT YOU WILL DO

• Lead the strategic direction, maturity and long-term development of H&M Group’s Cyber, Risk & Assurance capability, defining and evolving the strategy, roadmap and operating model in alignment with business, technology and cyber security objectives. 
• Contribute as a member of the Cyber Security Leadership Team to the overall cyber security strategy, priorities and long-term capability development. 
• Drive the continued development and maturity of the Information Security Management System (ISMS), including frameworks, policies and governance structures that enable consistent and effective management of cyber risk across H&M Group. 
• Provide oversight and assurance of cyber security risks and controls, promoting transparency, accountability and effective risk-based decision-making. 
• Strengthen H&M Group’s approach to security policy and compliance, regulatory requirements, security control assurance and governance reporting. 
• Drive the continued development of third-party and supply chain security risk management, ensuring risks are identified, assessed and managed through effective governance and oversight. 
• Lead budgeting, resource and investment planning, vendor strategy and prioritisation to support Cyber Risk & Assurance and wider cyber security objectives. 
• Foster a high-performing, collaborative and inclusive culture focused on strong accountability, continuous improvement and business value. 

Leadership as a Unit Manager  

As a Unit Manager and member of the Cyber Security Leadership Team, you provide strategic leadership for your unit while contributing to the overall direction and development of the Cyber Security function. You develop high-performing leadership teams, drive organisational effectiveness and capability development. You demonstrate enterprise leadership by collaborating across the business, influencing senior stakeholders and supporting decisions that create value beyond your own unit. 

WHO YOU ARE

We are looking for someone with: 

• 8+ years of people management experience in cyber security, technology risk, governance, compliance, assurance or a closely related field. 
• Proven experience leading enterprise-scale cyber risk, governance, compliance or assurance capabilities in a complex global organisation. 
• Proven experience leading through managers and developing high-performing leadership teams, with accountability for a multidisciplinary organisation and its outcomes. 
• Experience as a member of a senior cyber security, technology, risk or enterprise leadership team, contributing to shared strategy, priorities, investment decisions and organisational outcomes beyond your own area of responsibility. 
• Strong knowledge of cyber security risk management, governance, compliance and assurance principles, methodologies and operating models. 
• Strong knowledge of security frameworks, policies, standards and controls, and experience translating regulatory and internal requirements into effective security governance. 
• Strong understanding of third-party and supply chain security risk management in complex global environments. 
• Experience establishing meaningful cyber risk, governance and assurance metrics and translating risk and control information into clear business implications, priorities and decisions. 
• Experience managing significant budgets, investments, resources, sourcing arrangements and external partners, including strategic vendor relationships. 
• Excellent communication and influencing skills, with proven experience engaging senior and executive stakeholders and communicating complex cyber risk, regulatory and assurance topics in a clear and pragmatic way. 
• Sound judgement and decision-making capability in complex, uncertain and risk-sensitive situations. 

Qualifications

Additional Information

This is a fulltime permanent role based in Stockholm, Sweden.  
If you believe your experience, skills, and ambitions align with this role, please submit your CV in English.

Diversity, Inclusion, and Innovation 

At H&M Group, we're deeply committed to fostering a Diverse & Inclusive environment. We actively seek out qualified candidates regardless of race, gender, gender identity, sexual orientation, ethnicity, religion, national origin, disability, or age. 

Our commitment to an inclusive workplace drives our dynamic and forward-thinking culture. Regardless of your background, origin, or preferences, your application is warmly welcomed. We value diverse perspectives and skills, and every applicant contributes to our vibrant, creative community. Join us and be part of the future we're building. 

Our Offer 

At H&M Group, you're not just joining a team – you're joining a value-driven culture and an expansive tech network. Enjoy perks like staff discount cards, flexible work arrangements, wellness benefits, parental support, and more. Here, you're encouraged to be yourself, experiment, and chart your own growth path. As you flourish, so do we, with opportunities to create tangible impacts and shape the future.   

WHO WE ARE​ 

H&M Group is a global company of strong fashion brands and ventures. Our goal is to prove that there is no compromise between exceptional design, affordable prices, and sustainable solutions. We want to liberate fashion for the many, and our customers are at the heart of every decision we make.​ 

​We are made up of thousands of passionate and talented colleagues united by our shared culture and values. Together, we want to use our power, our scale, and our knowledge to push the fashion industry towards a more inclusive and sustainable future. ​ 

​WHY YOU’LL LOVE WORKING HERE ​ 

We offer all our employees at H&M Group attractive benefits with extensive development opportunities around the globe. All our employees receive a staff discount card, usable on all our H&M Group brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET. In addition to our staff discount, all our employees are included in our H&M Incentive Program – HIP. You can read more about our H&M Incentive Program here. 

In addition to our global benefits, all our local markets offer different competitive perks and benefits. Please note that they may differ between employment type and countries.  

JOIN US​ 

Our uniqueness comes from a combination of many things – our inclusive and collaborative culture, our strong values, and opportunities for growth. But most of all, it’s our people who make us who we are.​ 

​Take the next step in your career together with us. The journey starts here.​ 

​ *We are committed to a recruitment process that is fair, equitable, and based on competency. We therefore kindly ask you to not attach a cover letter in your application.​