Chief Information Security Officer

Apex Group Ltd; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Chief Information Security Officer to lead the charge in safeguarding information assets and technologies. This pivotal role involves crafting a robust security strategy, managing risks, and ensuring compliance with regulations. The CISO will be at the forefront of incident response, policy development, and security awareness initiatives, making a significant impact on the organization’s security posture. If you are a visionary leader with a passion for cybersecurity and a desire to protect vital information assets, this opportunity is perfect for you.

Qualifications

• Proven track record in information security and risk management.
• Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

Responsibilities

• Develop a comprehensive information security strategy aligned with business objectives.
• Lead incident response planning and manage security technologies.

Skills

Information Security Management

Risk Assessment

Incident Response

Policy Development

Compliance Management

Education

Bachelor's degree in Computer Science

Master's degree in Cybersecurity

Tools

Security Technologies

Job description

Chief Information Security Officer

Reports To: Chief Digital Information Officer

Job Summary:

The Chief Information Security Officer (CISO) is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. This role involves identifying, developing, implementing, and maintaining processes across the organization to reduce information and technology risks. The CISO will respond to incidents, establish appropriate standards and controls, manage security technologies, and direct the establishment and implementation of policies and procedures.

Key Responsibilities:

1. Develop and drive a comprehensive information security strategy aligned with enterprise business objectives.
2. Identify and assess security risks, implement measures to mitigate these risks, conducting regular risk assessments and audits.
3. Develop and implement information security policies, standards, procedures, and guidelines.
4. Lead incident response planning and investigation of security breaches.
5. Coordinate with legal and HR departments on disciplinary and legal matters associated with breaches.
6. Ensure compliance with relevant laws, regulations, and industry standards, keeping the business updated on the latest security regulations and compliance requirements.
7. Raise security awareness throughout the organization, ensuring adherence to security awareness training programs.
8. Manage the selection, implementation, and management of security technologies.
9. Provide regular updates on the status of the information security program to senior business leaders and the board of directors.
10. Prepare and present reports on security incidents, compliance, and risk management activities.
11. Work closely with other executives and IT experts to ensure the company’s data is secure.

Qualifications:

1. Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2. Extensive experience in information security and risk management, with a proven track record in a senior leadership role.
3. Relevant certifications such as CISSP, CISM, or CISA are highly desirable.