Cybersecurity Expert – Control Enforcement

About the role

The Cybersecurity Expert – Control Enforcement will join the CISO AI & Data team (A3I) to ensure the Group Cybersecurity Program is effectively applied across the AI & IT Innovation portfolio. Acting as the bridge between cyber‑governance and delivery teams, you will drive control execution, evidence collection and operational follow‑up with application owners.

Key responsibilities

• Deploy and monitor cybersecurity program requirements across A3I applications, tracking control execution and remediation.
• Collect, validate and maintain security evidence (risk assessments, documentation, test results) ensuring completeness and auditability.
• Partner with application owners to interpret requirements, implement controls and close gaps.
• Monitor risk and compliance status, contribute to dashboards, KPIs and reporting for CISO governance.
• Support the industrialisation and standardisation of cybersecurity practices, prepare governance committee materials and promote a security‑by‑design culture.

Required profile

• Strong experience in cybersecurity governance, IT risk management or control frameworks.
• Proven ability to handle audit expectations, internal control reviews and regulatory compliance.
• Demonstrated skill in tracking control compliance, risk status and managing remediation plans.

Required skills

• Good understanding of security and cloud environments.

What we offer

• Opportunity to influence cybersecurity strategy within a leading AI & data organization.
• Collaborative environment with direct impact on risk reduction and compliance.