Cyber Risk AVP

Bangalore Karle Town SEZ, India

Diageo

With over 200 brands sold in nearly 180 countries, Diageo is driven to be the world’s best brand builder, leading the way in premium drinks.

View all jobs at Diageo

Apply now Apply later

Job Description :

Job Title: Cyber Risk AVP

About the Function:

Our Digital and Technology (D&T) team are innovators, delivering ground-breaking solutions that will help craft the future of our iconic brands. Technology touches every part of our business, from the sourcing of balanced ingredients to marketing and development of our online platforms. We utilise data insights to build competitive advantage, supporting our people to deliver value faster.

Our D&T team includes some of the most hardworking digital professionals in the industry. Every day, we come together to push boundaries and innovate, crafting the digital solutions of tomorrow. Whatever your passion, we’ll help you become the best you can be, crafting career-defining work and delivering breakthrough thinking.

Role Responsibilities:

Job Title: Cyber Risk AVP

Level: 4B

Location: Bengaluru, India

Reports To: Global Head of Cyber Strategy

Job Purpose:

The Cyber Risk AVP will be responsible for overseeing the development and implementation of Diageo's cyber risk management framework. This role involves ensuring compliance with relevant regulations, and mitigating risks associated with information security.

Key Responsibilities:

  • Develop and maintain the cyber risk management framework in alignment with Diageo’s global policies.
  • Develop and execute the cyber risk management strategy aligned with business goals. 
  • Conduct regular risk assessments to identify potential threats and vulnerabilities across IT, OT & cloud environments.
  • Identify, assess, and prioritize risks based on impact and likelihood.
  • Maintain an up-to-date cyber risk register with remediation tracking.
  • Coordinate incident response planning and execution, including post-incident analysis.
  • Collaborate with IT, legal, compliance, and other departments to ensure comprehensive risk mitigation strategies.
  • Recommend and track implementation of risk mitigation actions and controls.
  • Ensure compliance with applicable regulations (e.g., GDPR, NIST, ISO 27001, etc.).
  • Provide regular reports, dashboards, and insights to senior management.
  • Collaborate with senior leadership to communicate risk exposure and mitigation plans.
  • Act as the point of contact for cyber risk in internal audits and regulatory reviews.

Qualifications:

  • Bachelor’s degree in computer science, Information Security, or related field.
  • Minimum 10 years of experience in cybersecurity or related roles.
  • Strong knowledge of cyber risk management frameworks and methodologies.
  • Relevant certifications such as CISSP, CISM, or CRISC are highly desirable.
  • Good understanding of cloud platforms (Azure, AWS, GCP), IT & OT security environments and their risk profiles.
  • Risk modelling and assessment using tools or BI platforms (Power BI, Tableau, etc.).

  • Excellent communication skills with the ability to present complex technical information to non-technical partners.
  • Experience working with compliance and regulatory frameworks (e.g., GDPR, SOX, NIS2).

Flexible Working Statement: Flexibility is key to our success. From part-time and compressed hours to different locations, our people work flexibly in ways to suit them. Talk to us about what flexibility means to you so that you’re supported from day one.

Diversity statement: Our purpose is to celebrate life, every day, everywhere. And crafting an inclusive culture, where everyone feels valued and that they can belong, is a crucial part of this.

We embrace diversity in the broadest possible sense. This means that you’ll be welcomed and celebrated for who you are just by being you. You’ll be part of and help build and champion an inclusive culture that celebrates people of different gender, ethnicity, ability, age, sexual orientation, social class, educational backgrounds, experiences, mindsets, and more.

Our ambition is to build the best performing, most trusted and respected consumer products companies in the world. Join us and help transform our business as we take our brands to the next level and build new ones as part of crafting the next generation of celebrations for consumers around the world.

Feel encouraged? Then this may be the opportunity for you. 

If you require a reasonable adjustment, please ensure that you gather this information when you submit your application.

Worker Type :

Regular

Primary Location:

Bangalore Karle Town SEZ

Additional Locations :

Job Posting Start Date :

2025-04-22
Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  1  1  0
Category: Compliance Jobs

Tags: Audits AWS Azure Business Intelligence CISM CISSP Cloud Compliance Computer Science CRISC GCP GDPR Incident response ISO 27001 NIS2 NIST Risk assessment Risk management RMF SOX Strategy Vulnerabilities

Perks/benefits: Career development Flex hours

Region: Asia/Pacific
Country: India

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.