Chief Information Security Officer (m/f/d)

As Chief Information Security Officer, you will define and lead Symrise’s global cyber and information security strategy to protect digital and production ecosystems while enabling innovation. You will report to the CDIO and steer a multi-year security roadmap across regions, business units, and technology environments. In this executive role, you will build and lead a global security organization, foster a strong security culture, and ensure resilience against evolving threats. This position offers visible impact on risk governance, regulatory compliance, and enterprise-wide cyber readiness, contributing to sustainable business growth and trust.

• Define and execute the global cyber security strategy and multi-year roadmap aligned with business priorities and IT strategy
• Lead and develop the global cyber security organization
• Promote security culture through awareness programs and leadership engagement
• Plan and manage global cyber security budget and external partnerships
• Establish and maintain global security governance, policies, standards, and risk management across IT, OT, cloud, digital, and business environments
• Drive threat intelligence reporting, incident visibility, and executive communications to enhance resilience
• Ensure compliance with ISO 27001, NIS2, GDPR, audit requirements and industry standards
• Lead security operations, incident response, threat intelligence, vulnerability management, and cyber crisis response
• Oversee identity and access management including MFA and Zero Trust capabilities
• Advance OT security to protect production environments and align with business needs
• Support customer security assessments and audits
• Coordinate cyber resilience, disaster recovery, and crisis with critical business functions
• Represent Symrise on cyber security matters with customers, regulators, and partners
• Stay ahead of emerging cyber threats and AI-related risks with evolving security controls

• University degree in a relevant discipline
• recognized cyber security certifications (CISSP, CISM, CISA or equivalent)
• extensive leadership experience in enterprise-wide cyber security
• experience embedding security into digital transformation and production environments
• proven incident leadership and crisis management capabilities
• deep expertise in governance, security operations, IAM, cyber resilience, and OT security
• strong knowledge of ISO 27001, NIS2, and data protection requirements
• executive leadership with budget, transformation, and board reporting experience
• ability to translate cyber risk into business recommendations
• ability to navigate complex, fast-changing environments with pragmatism

• strong strategic thinking
• clear communication with executives
• leadership and people management
• cyber security governance
• security operations
• incident response