As CISO, you will be the trusted advisor to the management and board of directors of an organization. You will have full ownership of the security roadmap, budget management, vendor management, and regulatory compliance. You will advise C-level colleagues, account for risks, and drive a security culture throughout the organization. The role combines technical knowledge with business insight. You will collaborate with IT, Compliance, Privacy, and operational teams.
You will build and lead an internal security team, set priorities, and clearly communicate risks to stakeholders at all levels.
What you do
- Formulate and maintain the security strategy in line with business objectives and regulations
- Manage the security budget and negotiate with vendors on contracts and SLAs
- Lead and build the security team, conduct performance reviews, and determine training
- Report security risks and compliance status to the board and audit committee
- Drive security awareness and culture change through training and communication
- Define security policies, controls, and incident response processes
- Ensure regulatory compliance (ISO 27001, NIS2, sector-specific requirements) and audit-readiness
- Participate in M&A evaluations, transformation projects, and risk assessments
Tech Stack & Tools.
- Platforms & Tooling: Microsoft Sentinel, Splunk, ServiceNow GRC, Archer, CyberArk, Okta, AWS Security Hub, Azure Defender
- Frameworks & Standards: ISO 27001, NIST Cybersecurity Framework, COBIT 2019, CIS Benchmarks, NIS2, DORA, MITRE ATT&CK
- Cloud & Infrastructure: AWS, Microsoft Azure, Google Cloud Platform
- Methodologies: Risk management, Business continuity planning, Incident management, Vendor risk management, Security governance
What they ask
- Minimum 10 years of cybersecurity experience, of which at least 3-5 years in a leadership CISO or similar role
- Deep understanding of security governance, risk management, and compliance frameworks (ISO 27001, NIST, COBIT)
- Proven ability to formulate and execute security strategy at board and enterprise level
- Experience with vendor management, security architecture, and incident response
- Strong communication and management skills; ability to clearly communicate risks to the board
Nice-to-haves.
- CISSP, CISM or CCISO certification
- Experience with cloud security governance (AWS, Azure, GCP) and hybrid environments
- Knowledge of regulations in your sector (banking, energy, healthcare, etc.)
What we offer.
- Influence at the highest level: you advise the board of directors and management
- Full ownership of the security strategy and complete budget autonomy
- Leadership of your own security team with room for coaching and talent development
- Collaboration with leading technology partners and opportunities for innovation
- Flexible working with possible remote work options and professional development opportunities
- Personal guidance by a specialized consultant who knows your niche
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.