CISO – Information Security & Cybersecurity Manager (5521)

A leading organization is seeking an experienced CISO to lead information security and cybersecurity across its subsidiaries.

Key Responsibilities

• Lead information security and cybersecurity activities across multiple subsidiaries.
• Implement security policies, procedures, standards, and controls.
• Develop risk-based security strategies and work plans.
• Conduct risk assessments, identify security gaps, and oversee remediation.
• Provide security guidance for projects, applications, infrastructure, cloud, SaaS, AI, and identity and access management.
• Assess third-party and vendor security risks.
• Oversee security assessments, penetration tests, and remediation processes.
• Lead cybersecurity incident management in coordination with relevant teams.
• Work closely with senior management, IT, business units, Legal, Risk Management, Privacy, and external vendors.
• Present cybersecurity risks and mitigation plans to senior management.
• Promote security awareness and best practices across the organization.

Requirements

• Significant experience in information security and cybersecurity, including cross-organizational responsibility.
• Proven experience in cybersecurity risk management and risk-based planning.
• Experience supporting technology projects, systems, and infrastructure from a security perspective.
• Strong knowledge of cloud environments, SaaS, applications, infrastructure, and identity and access management.
• Experience assessing vendor and third-party security risks.
• Familiarity with information security standards and frameworks such as ISO 27001 and NIST.
• Experience working in complex enterprise environments with multiple stakeholders.
• Strong leadership, communication, and stakeholder management skills.
• Ability to influence senior management and drive initiatives without direct authority.

Advantages

• Previous experience as a CISO or in a senior cybersecurity leadership role.
• Experience in financial services, insurance, or regulated industries.
• Experience managing security across multiple companies or within a matrix organization.
• Relevant certifications such as CISSP, CISM, or CRISC.