Global CISO & Head - Information Risk Management

Responsible and accountable for driving Information Risk Governance & Management, Cyber Security, Data Governance, Fraud Risk, Outsourcing Risk, Information Security strategy, Business Continuity etc. and its implementation across the organization

- Leads the design, implementation, operation and maintenance of the Information security management system based on the ISO/ IEC 27000 series standards, including certification against ISO 27001:2013 wherever applicable. 

- Routine line management and leadership of staff within the information security management. 

- Liaison with and offers strategic direction to related governance functions (such as Physical Security/Facilities, Risk Management, IT, HR, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies 

- Leads the design, implementation, operation and maintenance of the Information Security Management System based on the ISO/IEC 27000 series standards, including certification against ISO27001:2013 where applicable

 - Leads the preparation and authorizes the implementation of necessary information security policies, standards, procedures and guidelines, in conjunction with the Security Committee 

- Leads the SOC - 2 assessment framework and ongoing audits. 

- Leads the design and operation of related compliance monitoring and improvement activities to ensure compliance both with internal security policies etc. and applicable laws and regulations

 - Leads suitable information security awareness, training and educational activities 

- Leads information security risk assessments and controls selection activities

 - Leads activities relating to contingency planning, business continuity management and IT disaster recovery in conjunction with relevant functions and third parties 

Key personal characteristics and competencies of the ideal: 

- At least 5 years of full-time work experience in information security management and/or related functions (such as IT audit and IT Risk Management). 

- Information security management qualifications such as CISSP or CISM would be preferred. 

- Must have contributed in ISO27001:2013