Chief Information Security Officer (CISO)

Role & responsibilities

Strategy Development and Implementation

• Develop and execute a comprehensive information security strategy, policies, standards, and procedures aligned with the organization's overall business objectives.
• Identify, assess, and prioritize security risks, vulnerabilities, and threats.
• Oversee the design, implementation, and maintenance of security controls and safeguards.

Security Operations:

• Lead and manage a high-performing security operations team.
• Monitor and analyze security events, incidents, and alerts.
• Respond effectively to security incidents, minimizing impact and business disruption.
• Conduct regular security assessments, penetration testing, and vulnerability scanning.

Risk Management

• Identify, assess, and mitigate security risks throughout the organization.
• Develop and implement a robust risk management framework.
• Conduct regular risk assessments and audits
• Ensure compliance with relevant industry regulations, standards, and frameworks
• Work closely with legal and compliance teams to address security-related legal and regulatory requirements
• Assess and manage security risks associated with third-party vendors and partners.

Leadership:

• Stay current with emerging security threats, technologies, and best practices
• Provide technical leadership and guidance to security teams
• Collaborate with IT teams to ensure security is integrated into all aspects of the technology infrastructure

Pre-requisites:

• Must have 12+ years of proven track record in a complex, regulated environment, preferably in the fintech industry.
• Deep understanding of information security frameworks, standards, and best practices.
• Strong technical expertise in cybersecurity technologies, including network security, endpoint security, cloud security, and identity and access management.
• Excellent leadership, communication, and interpersonal skills.
• Ability to build and lead high-performing security teams.
• Certification(s) in information security (e.g., CISSP, CISM, CISA) preferred
• Strong analytical and problem-solving skills.