Chief Information Security Officer

Chief Information Security Officer

Reports To: Chief Digital Information Officer

Job Summary:

The Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role involves identifying, developing, implementing, and maintaining processes across the organization to reduce information and technology risks. The CISO will respond to incidents, establish appropriate standards and controls, manage security technologies, and direct the establishment and implementation of policies and procedures.

Key Responsibilities:

1. Develop and drive a comprehensive information security strategy aligned with enterprise business objectives.
2. Identify and assess security risks, implement measures to mitigate these risks, conducting regular risk assessments and audits.
3. Develop and implement information security policies, standards, procedures, and guidelines.
4. Lead incident response planning and investigation of security breaches.
5. Coordinate with legal and HR departments on disciplinary and legal matters associated with breaches.
6. Ensure compliance with relevant laws, regulations, and industry standards, keeping the business updated on the latest security regulations and compliance requirements.
7. Raise security awareness throughout the organization, ensuring adherence to security awareness training programs.
8. Manage the selection, implementation, and management of security technologies.
9. Provide regular updates on the status of the information security program to senior business leaders and the board of directors.
10. Prepare and present reports on security incidents, compliance, and risk management activities.
11. Work closely with other executives and IT experts to ensure the company’s data is secure.

Qualifications:

1. Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2. Extensive experience in information security and risk management, with a proven track record in a senior leadership role.
3. Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

#J-18808-Ljbffr…