Chief Information Security Officer (CISO)

Position: Chief Information Security Officer (CISO)

Job Title: Chief Information Security Officer (CISO)

Job Type: Full-Time

Job Description:

The Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The CISO will lead the development and implementation of security policies, risk management strategies, and compliance initiatives while continuously improving the organization's cybersecurity posture.

Key Responsibilities, but not limited to:

• Develop and implement an information security strategy aligned with business objectives, ensuring the protection of company assets, intellectual property, and customer data.
• Identify, assess, and mitigate security risks while establishing risk management frameworks and security governance policies.
• Ensure compliance with relevant laws, regulations, and industry standards such as ISO 27001, NIST, GDPR, HIPAA, PCI-DSS, and other applicable frameworks.
• Define and implement robust security architectures, network security configurations, and cloud security strategies.
• Develop and execute incident response plans, conduct security investigations, and coordinate with internal and external stakeholders during security incidents.
• Promote a culture of security awareness through employee training programs, phishing simulations, and regular security drills.
• Evaluate and manage the security risks associated with third-party vendors, service providers, and cloud solutions.
• Oversee security budgets, manage cybersecurity investments, and ensure cost-effective use of security resources.
• Collaborate with executive leadership, IT, legal, compliance, and business units to integrate security into business processes and decision-making.

Qualifications:

• Bachelors or Master’s degree in Computer Science, Information Security, or a related field.
• Minimum of 15+ years of experience in information security, with at least 5 years in a senior leadership role.
• Relevant certifications such as CISSP, CISM, CISA, or equivalent are a plus.
• Strong knowledge of cybersecurity frameworks, regulatory compliance, and risk management methodologies.
• Experience in cloud security, application security, and security operations.
• Excellent leadership, communication, and stakeholder management skills.