Job description
Job Summary:
The Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The CISO leads the development and implementation of cybersecurity policies and procedures, ensures regulatory compliance, manages security operations, and responds to incidents, threats, and vulnerabilities.
Key Responsibilities:
• Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.
• Lead security initiatives aligned with business goals to mitigate risk and protect critical assets.
• Identify, evaluate, and report on cybersecurity risks in a manner that meets compliance and regulatory requirements.
• Direct incident response planning and investigation of security breaches, and assist with disciplinary and legal matters associated with such breaches.
• Oversee the management of security technologies, including firewalls, antivirus, SIEM, and identity management.
• Manage and mentor a team of cybersecurity professionals and collaborate with IT, legal, compliance, HR, and other departments.
• Ensure compliance with standards such as ISO 27001, NIST, GDPR, HIPAA, and others as required.
• Report regularly to executive leadership and the board of directors on the state of cybersecurity and risk.
• Collaborate with stakeholders to ensure business continuity and disaster recovery plans are well maintained and tested.
Qualifications:
• Bachelor’s degree in Computer Science, Information Systems, or related field (Master’s preferred).
• 10+ years in IT and cybersecurity roles, with at least 5 years in a leadership position.
• Strong knowledge of cybersecurity frameworks, standards, and risk management practices.
• Professional certifications such as CISSP, CISM, CISA, or equivalent.
• Excellent leadership, communication, and project management skills.