Chief Information Security Officer

Chief Information Security Officer (CISO)

We are seeking a highly experienced and hands-on CISO to lead and evolve a comprehensive enterprise cybersecurity and information security program. This is a senior leadership role combining strategic direction with deep technical involvement, responsible for shaping and executing the organization’s end-to-end security, risk, and resilience strategy.

The ideal candidate will bring strong executive presence, proven hands-on technical expertise, and the ability to operate in a complex, fast-paced enterprise environment while enabling secure business growth and innovation.

Key Responsibilities

• Define and lead the enterprise cybersecurity and information security strategy, roadmap, and operating model
• Own and continuously improve the organization’s security posture across cloud, infrastructure, applications, data, identities, and third parties
• Lead cyber governance, enterprise risk management, and executive-level reporting, including board engagement
• Drive incident response, cyber resilience, business continuity, and disaster recovery readiness
• Oversee security operations, threat detection, vulnerability management, and third-party risk management
• Partner with technology and business leaders to embed security into architecture, transformation programs, and product development
• Build, mentor, and lead a high-performing security team while fostering a strong security culture across the organization

What We’re Looking For

Experience

• Minimum 5+ years in cybersecurity / information security roles
• At least 2–3 years in a senior leadership role (CISO / Deputy CISO / Security Lead / Team Lead)
• Proven experience combining strategic leadership with hands-on technical involvement in security operations

Technical Expertise

• Strong hands-on experience in public and hybrid cloud environments (AWS, Azure)
• Deep understanding of:
• Network Security
• Application Security
• Identity & Access Management (IAM)
• Proven experience in:
• Cloud Security
• API & Web Security
• DevSecOps and Secure SDLC practices
• Experience designing and implementing end-to-end security architectures

Operational & Technical Capabilities

• Leading complex Incident Response and cyber crisis management
• Hands-on experience with SIEM, EDR, and WAF solutions
• Vulnerability Management lifecycle ownership and execution
• Experience with penetration testing and/or red teaming activities

Compliance & Regulatory

• Strong knowledge of information security standards and regulatory frameworks
• Proven implementation experience with ISO 27001
• Experience working with privacy regulations and security audits
• Familiarity with regulatory bodies and external audit processes

Leadership & Soft Skills

• Ability to operate independently in a senior executive role with a lean team
• Strong systems thinking with deep technical attention to detail
• Excellent communication skills with experience presenting to executive leadership and board-level stakeholders
• Ability to manage multiple interfaces, priorities, and high-pressure situations
• Strong decision-making capabilities in complex and uncertain environments

Nice to Have

• Relevant certifications such as CISSP, CISM, or CCSP
• Experience in large-scale enterprise environments with complex infrastructures
• Background in offensive security (penetration testing, red teaming)