Job Description Summary:

Position Overview

The Cybersecurity Senior Manager will play a key role in strengthening and maturing Innocent's cybersecurity capabilities by leading the delivery of the cybersecurity roadmap, driving security improvement initiatives, and embedding secure practices across the organization.

This role combines technical cybersecurity expertise with leadership, program management, and stakeholder engagement. The successful candidate will be responsible for driving security engineering and operational security activities while ensuring that governance, risk, and compliance requirements are effectively managed.

This role operates within The Coca-Cola Company's Global Cybersecurity function and works closely with security, technology, and business leaders across innocent, other wholly owned entities, and the broader Coca-Cola system to advance cybersecurity strategy, risk management, and security engineering capabilities.

The successful candidate will bring strong technical cybersecurity capabilities alongside exceptional leadership potential, with the ability to influence stakeholders, drive change, and translate complex security challenges into practical business outcomes; as well as demonstrate the potential to evolve into broader cybersecurity leadership responsibilities through strong strategic thinking, business acumen, stakeholder engagement, and execution excellence.

Key Responsibilities:

Cybersecurity Strategy & Program Delivery

• Support the development and execution of Innocent's cybersecurity strategy and roadmap.
• Lead cybersecurity improvement programs and initiatives from concept through implementation.
• Drive the adoption of security best practices across technology and business teams.
• Identify opportunities to enhance security capabilities through process improvement, automation, and technology optimization.
• Track and report on cybersecurity objectives, milestones, risks, and performance metrics.
• Translate cybersecurity risks into business impact and actionable recommendations for leadership.

• Partner with business leaders to align cybersecurity investments with organizational objectives and risk priorities.
• Provide cybersecurity input into strategic initiatives, digital transformation programs, and third-party engagements.

Security Engineering & Technical Security

• Lead and support the implementation of security technologies and controls across cloud and on-premise environments.
• Partner with technology teams to promote secure architecture, secure development, and security-by-design principles.
• Manage and enhance cloud security capabilities, including cloud security posture management and security monitoring solutions.
• Support vulnerability management activities, including identification, prioritization, remediation tracking, and reporting.
• Provide technical guidance on cybersecurity standards, controls, and emerging security threats.
• Maintain awareness of evolving threat landscapes and recommend appropriate defensive measures.

Governance, Risk & Compliance

• Support cybersecurity governance activities, including policy, standards, and procedure development.
• Conduct and facilitate cybersecurity risk assessments and remediation planning.
• Support internal and external audits and cybersecurity assurance activities.
• Ensure compliance with applicable corporate policies, regulatory requirements, and industry standards.
• Contribute to third-party cybersecurity risk management processes where required.
• Produce meaningful reporting and metrics to communicate cybersecurity risks and programs effectiveness.

Stakeholder Engagement & Leadership

• Build strong relationships with business and technology stakeholders across Innocent and Coca-Cola.
• Influence secure decision-making through effective communication and risk-based recommendations.
• Act as a trusted cybersecurity advisor to project teams and business leaders.
• Provide leadership and direction for cybersecurity initiatives, coordinating resources across multiple teams.
• Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization.
• Provide leadership and coordination for cybersecurity incident response activities and major security events.

Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting.

Role Requirement

• Demonstrable experience in cybersecurity, information security, or security engineering roles.
• Experience implementing and operating cybersecurity controls within cloud-based environments.
• Strong understanding of Microsoft security technologies, including some combination of:
  • Microsoft Defender Suite
  • Microsoft Sentinel
  • Microsoft Entra ID
  • Microsoft Purview
• Experience with vulnerability management processes and tooling such as Qualys, Tenable, Rapid7, or equivalent platforms.
• Knowledge of cloud security posture management and cloud security best practices.
• Familiarity with threat intelligence, threat detection, and incident response processes.
• Ability to balance technical security requirements with business priorities.
• Experience managing and delivering cybersecurity projects or programs
• Strong analytical and problem-solving capabilities.
• Excellent written and verbal communication skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Demonstrated ability to work independently while influencing outcomes across a matrixed organization.
• Strong sense of ownership, accountability, and continuous improvement.

Additional Qualifications for a Competitive Advantage

• Experience within FMCG, manufacturing, supply chain, or consumer goods environments.
• Hands-on experience with Microsoft Azure security technologies.
• Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms.

• Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications are desirable.
• Experience supporting ISO 27001, NIST CSF, CIS Controls, or similar security frameworks. Experience working with third-party suppliers and cybersecurity assessments. Experience leading or supporting security incident investigations.

Skills:

Location(s):

City/Cities:

Travel Required:

Relocation Provided:

Job Posting End Date:

Our Purpose and Growth Culture:

We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola.