Chief Information Security Officer

Job Summary

The Chief Information Security Officer (CISO) leads the organization's information security strategy and protects its data and systems from cyber threats and data breaches.

Your primary duties as CISO include developing, implementing, and monitoring a comprehensive enterprise Information Security and IT risk management program. The CISO serves as the process owner for all activities related to the availability, integrity, and confidentiality of customers, business partners, employees, and business information, ensuring information assets are adequately protected and in compliance with the organization's security policies.

As CISO at AllCloud, you will collaborate with management to determine acceptable levels of risk for the organization and establish a corporate-wide information security management framework. You will be responsible for driving the company's overall security strategy, overseeing its implementation, and creating and implementing comprehensive information security programs to safeguard the organization.

The CISO acts as a strategic leader, protecting the organization from cyber threats, minimizing IT security risks, and ensuring business continuity through effective security practices and technologies.

Key Responsibilities

• Manage the daily operation and implementation of the company security strategy
• Develop and enhance an information security management framework
• Work with the various business units to facilitate risk assessment and risk management processes
• Interact with the relevant disciplines to ensure the consistent application of policies and standards across all technology projects, systems, and services
• Partner with business stakeholders across the company to raise awareness of risks and security concerns while championing and educating the organization about the latest security strategies and technologies
• Conduct continuous assessment of current security practices and systems to identify areas for improvement
• Manage security incidents, incident response, and investigations
• Deliver new security technology approaches and implement next-generation solutions
• Oversee the management of the IT security and budget
• Ensure compliance and governance requirements are met
• Develop and implement business continuity plans
• Protect the intellectual property of the organization
• Devise strategies and implement IT solutions to minimize the risk of cyber-attacks

Required Skills and Abilities

• 8+ years of experience in a combination of risk management, information security, and IT jobs, with at least three years as a CISO
• Multicultural and fluent in English, both written and verbal
• Dealing with complex projects and meeting conflicting demands in the security field
• Management of ISO 27001/27017 audits and certification
• Managing 3rd party audits and responding to customers' and partners' security questionnaires
• Proficient with Cloud Infrastructure and IaaS/PaaS/SaaS-based environments
• Network communication, Endpoint security, and device management understanding - EDR, SSO, MDM, Firewalls, Switches, SIEM/SOAR, etc
• S-SDLC and code-scanning tools
• Service-oriented and customer-facing skills. Detail-oriented, self-sufficient, resourceful, organized, and proactive
• Experience working with international vendors and partners
• Ability to adapt to a fast-moving IT landscape and keep pace with the latest thinking and new security technologies
• Analytical mind capable of managing numerous information sources and providing data analysis reports to senior management
• Flexible and adaptable - Capable of changing direction where required and showing flexibility to meet new demands
• Hands-on application security proficiency when required

Advantage

• AWS Cloud
• Google Workspace / Microsoft 365
• OneLogin
• Intune
• Kandji
• Cisco
• Crowdstrike

Certifications (Advantage)

• Bachelor's Degree in Computer Science or related field.
• Professional security management certification