Chief Information Security Officer

Governance - Establish cybersecurity risk management frameworks and policies - Conduct risk assessments, vulnerability management, and penetration testing - Align with standards such as ISO/IEC 27001, NIST, and CIS Controls 4. Compliance & Regulatory Oversight - Ensure compliance with regulations such as GDPR, HIPAA, PCI-DSS, and local cybersecurity laws - Manage audits, certifications, and regulatory reporting - Partner with legal, compliance, and audit teams 5. Incident Response & Resilience - Lead incident response planning, crisis management, and breach handling - Ensure business continuity and disaster recovery readiness - Conduct simulations and tabletop exercises 6. Identity & Access Management (IAM) - Oversee identity governance, access controls, and privileged access management - Ensure secure authentication and authorization mechanisms 7. Third-Party & Cloud Security - Manage vendor and third-party risk assessments - Ensure security across cloud platforms and

outsourced services - Establish secure DevSecOps practices 8. Security Awareness & Training - Develop organization-wide security awareness programs - Train employees on cyber risks, phishing, and best practices Qualifications & Experience - Bachelor’s or Master’s degree in Cybersecurity, IT, Computer Science, or related field - 15-20+ years of experience in cybersecurity or IT security roles - 5+ years in senior leadership roles (CISO, Head of Security, etc.) - Strong expertise in security architecture, risk management, and compliance - Professional certifications preferred (CISSP, CISM, CRISC, etc.) Key Competencies - Deep cybersecurity and risk management expertise - Strategic thinking and business alignment - Crisis management and decision-making under pressure - Strong leadership and stakeholder influence - Regulatory and compliance knowledge