A leading organization is starting a transformation towards security maturity. There is no established security function yet; you will lay the first stones. This means: defining strategy, designing processes, setting up governance, and managing teams. You are not only a technical leader but also a change agent. You will work directly with management, set priorities, and make security understandable for non-technical stakeholders. The impact?
You ensure that security is not an afterthought but becomes embedded in the organizational culture and IT architecture.
What you do
- Design the security strategy and roadmap for 18-24 months
- Define roles, processes, and governance structures
- Build a security team and coach members in their new roles
- Implement core functions: asset management, incident response, vulnerability management, access control
- Report progress, risks, and priorities to management and the board
- Select and integrate security tools appropriate for the organization
- Set up security awareness and training
- Define KPIs and measure maturity according to frameworks like NIST CSF or COBIT
Tech Stack & Tools. Platforms & Tooling.
- SIEM (Splunk, Sentinel, QRadar)
- Vulnerability scanning (Nessus, Qualys)
- IAM (Entra ID, CyberArk)
- Ticketing/ITSM (ServiceNow, Jira)
Frameworks & Standards.
- NIST Cybersecurity Framework
- ISO 27001
- COBIT 2019
- MITRE ATT&CK
Cloud & Infrastructure.
- Azure (Defender, Sentinel)
- AWS (Security Hub, GuardDuty)
- Google Cloud
Methodologies.
- Risk assessment and threat modeling
- Agile security planning
- Change management
- Stakeholder engagement
What they ask
- 8+ years of broad cybersecurity experience (various domains)
- Demonstrable experience in setting up security functions or teams
- Knowledge of governance, risk, and compliance frameworks
- Strong communication and presentation skills
- Strategic thinking coupled with hands-on technical knowledge
- CISSP or CISM certification
Preferences.
- Experience with security transformation in large or complex organizations
- CCISO or ITIL background
- Knowledge of sectors such as finance, government
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.