Chief Information Security Officer (CISO)

About the role

The Chief Information Security Officer (CISO) leads the organisation’s cybersecurity strategy, governance and operational security programmes. Reporting to senior leadership, the CISO defines the long‑term security roadmap and ensures protection of systems, applications, infrastructure and sensitive data against evolving threats.

Key responsibilities

• Define and drive the enterprise cybersecurity strategy, set risk‑reduction goals and establish performance metrics.
• Build, lead and mentor high‑performing security teams while fostering collaboration with business and technology leaders.
• Develop and maintain governance frameworks, standards and controls aligned with industry regulations and data‑protection requirements.
• Oversee security operations, incident response, detection, monitoring and continuous improvement of security processes.
• Design and implement security for cloud platforms, containerised environments, automation and emerging technologies.
• Manage third‑party security assessments, vendor risk and privileged access controls.

Required profile

• Bachelor’s degree in IT, Computer Science, Engineering or a related field.
• Minimum 15 years of experience in cybersecurity or information security within large‑scale or enterprise environments.
• At least 7 years of leadership experience managing security teams and programmes.
• Strong knowledge of NIST, ISO 27001 and other security frameworks and compliance models.

Required skills

• Cloud security
• Incident response
• Risk management
• Security operations
• Encryption
• Identity and access management
• Privileged access management
• Vendor risk management
• Continuous monitoring
• Automation frameworks
• Containerised environments
• NIST framework
• ISO 27001 standard