Head Of Risk and Cyber Security

About Foodics

Role Overview

Enterprise Risk Management

• Design and maintain the ERM framework, risk appetite statement, and risk registers.
• Lead business-unit risk assessments and prepare board and ERM committee reporting with KRIs and KPIs.
• Identify emerging risks and drive mitigation planning with process owners.
• Own business continuity and disaster recovery planning.
• Support internal audit and compliance with risk-based input.

Cyber and Information Security

• Develop and execute information security strategy, policies, and controls.
• Oversee threat detection, vulnerability management, incident response, and penetration testing.
• Lead cyber incident response planning and serve as incident commander during security events.
• Ensure compliance with data protection regulations and industry certifications.
• Manage security awareness training programs.

Leadership and Governance

• Build, lead, and develop the risk and security team.
• Present risk and security posture updates to executive leadership and the board or risk committee.
• Manage regulators, auditors, and external security partners.
• Own the risk and security budget, tooling, and roadmap.

Qualifications and Experience

• A bachelor's degree in information security, risk management, computer science, or a related field is required.
• A master's degree is preferred.
• At least 10 years of risk management and/or cybersecurity experience is required.
• At least 5 years of leadership experience is required.
• Relevant certification such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor is required.
• Fluent English and strong written and verbal communication skills are required.

Core Competencies

• The role requires strategic thinking with hands-on execution ability.
• Strong analytical, problem-solving, crisis management, and decision-making skills are required.
• The role requires cross-functional influence without direct authority.