THE ROLE

As Lead IT Security & Governance, you lead and develop our IT Security & Governance function, encompassing IT Security, Governance frameworks, and Software License Management. Reporting directly to the VP Global IT, you serve as an inspirational, goal-oriented leader responsible for building out the function and embedding pragmatic security standards across Canyon. In this high-impact role, you balance strategic decision-making, regulatory alignment (including NIS2, EU AI Act, and CRA), and commercial cost optimization, acting as a trusted sparring partner to internal leadership, authorities, and external auditors. 

YOUR JOB AS PART OF THE CANYON CREW

• Function Leadership & Development: Leading, inspiring, and continuously building out the IT Security & Governance function drives team maturity and organizational growth.
• Framework Design & Implementation: Designing, implementing, and continuously refining IT Security and Governance frameworks ensures alignment with NIS2, EU AI Act, and Cyber Resilience Act (CRA) standards.
• Software License Management: Owning end-to-end software license management guarantees organizational compliance, audit readiness, and commercial cost optimization.
• Policy & Control Definition: Defining and maintaining IT policies, security standards, and governance controls establishes clear guidelines across all business units.
• Risk & Incident Management: Steering IT risk management, security incident response procedures, and business continuity planning safeguards critical operational assets.
• Audits & Regulatory Contact: Acting as the primary contact for authorities and auditors facilitates smooth internal and external audit executions and timely finding remediations.
• Reporting & KPI Management: Setting up and tracking key performance indicators (KPIs), SLAs, and regular reporting structures provides transparent insights to executive leadership.
• Strategic Stakeholder Alignment: Building strong relationships with internal leaders across IT and business departments ensures security requirements integrate smoothly into company strategy.

HOW YOU BECOME PART OF THE RACE

• Professional Background: Several years of progressive experience in IT Security and/or IT Governance-ideally paired with proven functional or team leadership experience-forms your foundation.
• Regulatory Expertise: Solid knowledge of relevant frameworks and regulations (such as NIS2, EU AI Act, CRA, ISO 27001, or comparable standards) characterizes your technical capability.
• Audit & Compliance Operations: Proven hands-on experience interfacing with auditors and regulatory authorities supports smooth compliance management.
• Pragmatic Mindset: The ability to translate complex regulatory requirements into pragmatic, actionable processes combines with a balance between technical depth and commercial awareness.
• Stakeholder & Service Orientation: High customer orientation paired with exceptional communication capabilities enables effective collaboration across all leadership levels.
• Language Skills: Business fluent English communication skills (both written and spoken) allow for clear collaboration across international teams and external partner networks.