Security Services Delivery & Awareness Lead

CHEP helps move more goods to more people, in more places than any other organization on earth via our 300 million pallets, crates and containers. We employ 11,000 people and operate in more than 55 countries. Through our pioneering and sustainable share-and-reuse business model, the world’s biggest brands trust us to help them transport their goods more efficiently, safely and with less environmental impact. 

What does that mean for you? You’ll join an international organization big enough to take you anywhere, and small enough to get you there sooner. You’ll help change how goods get to market and contribute to global sustainability. You’ll be empowered to bring your authentic self to work and be surrounded by diverse and driven professionals. And you can maximize your work-life balance and flexibility through our Hybrid Work Model.

Job Description

Position Purpose

The Security Services Delivery Lead will establish, lead, and deliver the overall Security program portfolio for the company, including program updates, metrics management, PMO oversight, Training and Awareness, Data Protection, GRC, and general security evangelism across the enterprise. This is an exciting role to define and drive total employee involvement in corporate security initiatives, while delivering transformational security improvement across multiple areas of scope as a true change agent for the enterprise.  

Major / Key Accountabilities

• Deliver excellence in Security program delivery, data protection, and training & awareness across the Brambles enterprise.
• Maintain strong partner relationships, evangelize information security, advise senior leadership and key partners on cyber risks.
•  Operationalize and improve security governance structure and reporting, both operational and for security committees and management teams, partnering across functions, regions, and various external teams involved. 
•  Coordinate project assurance of key initiatives, and perform risk management, in strict alignment and collaboration with other teams in TS and beyond (e.g. Risk & Assurance, Supplier and Customer security audits, Cybersecurity assessments, etc), with the biggest purpose to enable the Business via cyber strategy deployment.
•  Support the design and the implementation of a Cyber Risk Program, with technology, process, and organizational components, by taking into account e.g. insights from project assurance (e.g. in terms of recurrent security gaps and deficiencies), key business strategy elements, Cyber Threat Intelligence insights, etc., in order to increase cybersecurity maturity and business resilience; correlate CRP implementation progress to Cyber Maturity Index increase (NIST, etc).
• Support Information Security Assessments across locations, applications and security processes, in order to identify security gaps, perform risk management, and define risk-reduction actions to be implemented by teams within and beyond TS.
•  Work with global teams to ensure policies, standards, and control frameworks consider regional/market nuances responding to local laws, regulations, and other local requirements.
•  Strengthen ownership and awareness of Information Security through continuous trainings and awareness campaigns globally.
• Lead and drive the overall Cyber data protection program including data classification, data loss prevention, and data residency.  
• Lead internal scorecard and metrics management program indicating health and success of the overall cyber program.
• Develop security training and awareness content.
• Identify new partners to help deliver content in an engaging way.
• Appropriate reporting including security knowledge assessments, training completion rates.
• Champion new security tooling, and effective change management.
• Create and maintain strong relationships throughout the business to foster a “change champions” support pool.
• Maintain a good understanding of security techniques and terminology to be able to fluently articulate security concepts in a simple to underst