Regional Cybersecurity Specialist M/F

Carrier Global Corporation, ein weltweit führendes Unternehmen für intelligente Klima- und Energielösungen, engagiert sich für Innovationen, die Komfort, Sicherheit und Nachhaltigkeit in den Alltag bringen. Durch modernste Entwicklungen in Bereichen wie Temperaturregelung, Luftqualität und Transport verbessern wir das Leben der Menschen, unterstützen kritische Branchen und gewährleisten den sicheren Transport von Lebensmitteln, lebensrettenden Medikamenten und mehr. Seit der Erfindung der modernen Klimaanlage im Jahr 1902 verfolgen wir ein klares Ziel: das Leben der Menschen und unsere gemeinsame Welt zu verbessern. Unsere führende Position verdanken wir unserer erstklassigen, inklusiven Belegschaft, die den Kunden in den Mittelpunkt stellt. Weitere Informationen finden Sie unter corporate.carrier.com oder folgen Sie Carrier in sozialen Medien @Carrier.

Carrier is the leading worldwide provider of heating, ventilation, and air conditioning (HVAC), refrigeration, fire, security, and cold chain solutions. We invented the modern air conditioning, and our team of pioneers and innovators have a long trajectory of developing new technologies.

We offer an evolving range of industry-leading services and solutions aimed to create healthier homes, buildings, and shipping environments to reduce environmental impact. We recognize diversity and inclusion as the engine to growth and innovation, and continue to lead because we have an exceptional workforce that puts the client at the centre of everything.

About the Role

We are looking for a Regional Cybersecurity Specialist (RCS) to join a global cybersecurity organization and play a key role in driving cyber resilience, regulatory compliance, and risk reduction across a defined region.

As a senior cybersecurity leader, you will act as a strategic partner to regional business and technology stakeholders, ensuring that global cybersecurity strategy is effectively implemented while addressing local risks, regulations, and operational challenges.

This is a high-impact, transversal role at the intersection of security, business, and transformation.

Cyber Risk Management

• →

  Own and maintain the regional cyber risk register

• →

  Assess risks related to business initiatives, technology changes, and operations

• →

  Provide insights to support enterprise-level decision-making

Governance, Policy & Compliance

• →

  Ensure adoption of global cybersecurity policies and standards across the region

• →

  Manage exceptions, remediation plans, and audit readiness (e.g., SOX)

• →

  Collaborate with Internal Audit, Compliance, and Regulatory teams

Incident Response & Resilience

• →

  Lead regional response to major cybersecurity incidents

• →

  Coordinate containment, recovery, and communication

• →

  Drive post-incident improvements and resilience exercises

Third-Party Risk Management

• →

  Oversee vendor risk assessments (TPRM)

• →

  Support remediation of third-party risks

• →

  Monitor supply chain and external threat exposure

Security Advisory & Architecture

• →

  Advise on IT/OT architecture, cloud, IAM, and network security

• →

  Ensure security-by-design across digital and transformation initiatives

• →

  Align with global architecture and engineering teams

Regulatory & Data Privacy

• →

  Act as the regional cybersecurity representative for regulatory matters (e.g., GDPR)

• →

  Ensure audit and certification readiness

• →

  Monitor evolving regulations and guide business stakeholders

Business Engagement & Leadership

• →

  Serve as a trusted advisor to CIOs and regional leadership

• →

  Embed cybersecurity into strategy, transformation, and M&A activities

• →

  Deliver executive-level reporting on security posture

Awareness & Culture

• →

  Lead regional security awareness initiatives

• →

  Track behavioral metrics and improve security culture

Program Delivery & Metrics

• →

  Oversee cybersecurity aspects of major regional programs

• →

  Track KPIs/KRIs and report to senior leadership

Experience

• 10+ years of experience in cybersecurity

• Strong background in regional or global environments

• Experience working across multiple countries and business units

Expertise

• Strong knowledge of GRC (Governance, Risk & Compliance)

• Experience with frameworks: NIST, ISO 27001, CIS, PCI-DSS, MITRE ATT&CK

• Solid understanding of cloud security, IAM, and network security

• Ability to operate at both strategic and operational levels

Certifications (preferred)

• CISSP, CISM, CRISC, or CCSP

• ISO 27001 Lead Implementer / Auditor

• CEH or equivalent

Soft Skills

• Strong stakeholder management and influencing skills

• Ability to translate technical risk into business insights

• Comfortable operating in high-pressure and complex environments

• Experience working in multicultural and international contexts

As an employer of choice, our greatest assets are the expertise, creativity, and passion of our employees. We strive to provide a great place to work that attracts, develops, and retains the best talent, promotes employee engagement, fosters teamwork, and drives innovation for the benefit of our customers.

We aim to create an environment where you feel that you belong, with diversity and inclusion as the engine to growth and innovation. We develop and deploy best-in-class programs and practices, providing enriching career opportunities, listening to employee feedback, and always challenging ourselves to do better.

The values that guide us are respect, integrity, inclusion, innovation, and excellence.

We’re excited for you to join us and make a difference.

Wir bieten ein wettbewerbsfähiges Gesamtvergütungspaket mit zusätzlichen Benefits und Gesundheitsprogrammen. Diese variieren je nach Position und Standort.

Carrier verpflichtet sich zur Gleichbehandlung.

Alle qualifizierten Bewerber werden unabhängig von persönlichen Merkmalen berücksichtigt.

Bei Bedarf an Unterstützung im Bewerbungsprozess kontaktieren Sie uns unter Carrier.Recruiting@carrier.com

Bitte klicken Sie auf den folgenden Link.

Technologiegestützte Tools können einzelne Schritte des Einstellungsprozesses unterstützen, bleiben dabei jedoch stets unter menschlicher Aufsicht.