A leading organization is looking for a Chief Information Security Officer (CISO) to elevate security from an operational to a strategic level. You will have a budget, a team, and the mandate to establish security governance, risk management, and compliance. You will be the link between the Board, IT, and operational management. The role requires someone who is both technically skilled and diplomatically strong. You will speak the language of business impact, not just security matters.
The goal is to create a culture where security is seen as an enabler, not a blocker.
What you will do.
- Define security strategy, roadmap, and objectives aligned with business risks
- Manage the security organization: recruit, coach, and evaluate the team and external partners
- Report to management and the Board on security posture, trends, and major incidents
- Drive vendor management, negotiate contracts, and evaluate security products
- Ensure compliance with ISO 27001, NIS2, DORA, and industry-specific regulations
- Monitor and respond to geopolitical threats and industry-related cyber incidents
- Build governance structures (RACI, policies, frameworks) and implement them throughout the company
- Lead incident response for serious breaches; communicate transparently with stakeholders
Tech Stack & Tools. Platforms & Tooling.
- Sentinel
- CrowdStrike
- Splunk
- ServiceNow GRC
- Archer
- SailPoint
Frameworks & Standards.
- ISO 27001
- NIST Cybersecurity Framework
- MITRE ATT&CK
- CIS Benchmarks
- COBIT 2019
- NIS2
- DORA
Cloud & Infrastructure.
- Azure Defender
- AWS Security Hub
- Cloud Access Security Brokers
Methodologies.
- Risk-based security planning
- Incident Response & Crisis Management
- Stakeholder-driven governance
- Board-level reporting
- Security metrics & KPIs
What they ask
- Minimum 10+ years of cybersecurity experience with 3+ years in a leadership/strategic role
- Proven track record in building or transforming security organizations
- Deep understanding of risk management, governance, and compliance frameworks
- Experience with incident response, crisis communication, and vendor management
- Strong communication and presentation skills at C-level
Preferences.
- Experience in a relevant industry (energy, finance, government, healthcare)
- CISSP, CISM or equivalent certification
- Budget management and P&L responsibility
Practical
- Strategic role with direct influence on security culture and business risks
- Autonomous budget and mandate for team and tools
- International networking opportunities and sector expertise
- Mentorship and sparring from an experienced security executive
- Personal guidance by a specialized consultant who knows your niche
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.