Chief Information Security Officer (m/f/d)

At Symrise we create inspiring scent and taste experiences for products that are a staple part of every life, such as perfumes, personal care products, detergents and household cleaners, beverages, snacks, sweets, pet food and baby food. With over 9,000 employees in 90 different countries, we have established ourselves as one of the world's leading companies in our industry. Our scents, flavors, cosmetic ingredients and functional ingredients can be found in more than 30,000 products in around 160 countries.

Aufgaben

Your role

As Chief Information Security Officer (CISO), you will define and lead Symrise's global cyber and information security strategy at a time of accelerating digitalization and an increasingly complex risk landscape. Reporting directly to the Chief Digital & Information Officer (CDIO), you will be responsible for safeguarding Symrise's global digital ecosystem, production environments, data and critical technology services, while ensuring that security enables innovation, operational resilience and sustainable business growth.

In this highly visible leadership role, you will shape and deliver a multi-year security roadmap, advise senior management and the Executive Board on cyber risk and resilience, and lead a global organization responsible for protecting the company across all regions, business units and technology environments.

Main responsibilities include but are not limited to:

• Define, own and execute the global cyber security strategy and multi-year roadmap, aligned with business priorities, regulatory requirements and the wider IT strategy
• Lead and further develop the global cyber security organization, ensuring that its structure, capabilities and talent remain aligned with current and emerging risks
• Promote a strong and practical security culture through awareness programs, leadership engagement and guidance for employees and managers
• Plan and manage the global cyber security budget, including investment prioritization, resource allocation, cost control and the management of external partners
• Establish and maintain global security governance, policies, standards, control frameworks and risk management processes across IT, OT, cloud, digital and business environments
• Drive cyber security awareness and transparency through effective dashboarding, threat intelligence reporting, incident visibility and executive communications to enhance organizational responsiveness and resilience
• Ensure compliance with applicable security and information protection requirements, including ISO 27001, NIS2, GDPR, audit requirements and relevant industry standards
• Lead global security operations, incident response, threat intelligence, vulnerability management and cyber crisis response
• Oversee and strengthen enterprise-wide identity and access management, including access governance, privileged access, lifecycle processes, multifactor authentication and Zero Trust-related capabilities
• Advance the OT security program to protect production and industrial environments while reflecting operational and business requirements
• Support customer security assessments, audits and contractual security requirements
• Strengthen cyber resilience through crisis preparedness, IT disaster recovery and coordination with critical business functions
• Represent Symrise on cyber security matters in interactions with customers, auditors, regulators, external partners and relevant industry networks
• Keep abreast of emerging cyber threats, technology developments and AI-related risks, proactively evolving security strategies, controls and capabilities in response

Profil

• University degree in a relevant discipline and recognized cyber security certifications such as CISSP, CISM, CISA or equivalent
• Extensive leadership experience defining and leading enterprise-wide cyber security strategies and organizations in complex multinational environments
• Experience embedding security into digital transformation, business operations, production environments and customer-facing processes
• Track record of leading organizations through cyber incidents and crisis situations with sound judgement and decisiveness
• Deep expertise across cyber security governance, security operations, incident response, identity & access management, cyber resilience and operational technology (OT) security
• Strong knowledge of relevant regulatory and industry frameworks, such as ISO 27001, NIS2 and data protection requirements
• Strong executive leadership capability, including responsibility for teams, budgets, transformation initiatives and Board-level reporting
• Proven ability to effectively translate cyber security risks and technical concepts into clear business recommendations for senior stakeholders and executives
• Demonstrated ability to navigate complex, fast-changing environments with agility and pragmatism, balancing strategic leadership with a hands‑on approach to problem‑solving, decision‑making and the execution of critical security initiatives

Wir bieten

This is a unique career opportunity for a leader who combines deep security expertise with sound business judgement to define and lead a global information and cyber security agenda.

LOCATION (COUNTRY)

Holzminden (Germany), Barcelona, Data & AI Hub (Spain)

Important note

Please be advised that a valid work permit for Germany is required for non-EU citizens. Unfortunately, applications without a valid work permit and sufficient German language skills may not be considered.