Chief Information Security Officer

Job Summary

The Chief Information Security Officer (CISO) is a senior-level IT leadership position responsible for overseeing the enterprise cybersecurity program and providing strategic leadership in IT governance, risk and cross-functional management of information and technology security across the organization.

Job Description

Typical duties include but are not limited to :

• Partners and leads the cybersecurity function across the organization to ensure consistent, high-quality information security management in support of the organization goals.
• Develops the cybersecurity strategy and operating model in collaboration with stakeholders, ensuring alignment with the organization's risk management approach and compliance monitoring for non-digital risk areas.
• Establishes a cybersecurity governance framework by implementing a structured governance program, including the creation of a cybersecurity steering committee or advisory board.
• Collaborates with the procurement office to ensure cybersecurity requirements are integrated into contracts by coordinating with vendor management and procurement teams.
• Develops and updates policies and procedures to safeguard information assets, addressing emerging threats and industry standards while identifying, evaluating, and managing cybersecurity risks to the organization.
• Oversees risk evaluation and compliance management processes while developing risk management frameworks to prioritize and mitigate potential cybersecurity threats, vulnerabilities, and incidents.
• Advises on the cyber risk posture of the organization, including the mandatory application of controls.
• Ensures the organization complies with relevant legal, regulatory, and industry standards. Maintains awareness of evolving laws and regulations to ensure ongoing compliance.
• Manages resources in alignment with the IT workforce plan and supports the CIO in budgeting for the cybersecurity function by monitoring and reporting any discrepancies.
• Develops a cybersecurity vision and strategy aligned with organizational priorities to support business objectives while securing senior stakeholder buy-in. This includes creating, implementing, and monitoring a comprehensive cybersecurity program that ensures the confidentiality, integrity, and availability of the organization's information assets, as well as compliance with safety, privacy, reliability, and resilience requirements.
• Manages and contains cybersecurity incidents and events to protect corporate IT assets, intellectual property, regulated data and the company's reputation.
• Manages an effective cybersecurity organization consisting of direct reports including hiring, training, staff development, performance management and review process.
• Leads the development of IT policies, procedures, and performance management processes, while providing guidance on information security governance to ensure that security initiatives are effectively integrated throughout the organization.
• Liaises with external agencies, including law enforcement, SUS CISOs, and other advisory bodies, to ensure the organization maintains a strong security posture and stays informed of relevant threats identified by these entities.
• Stays current with developments in new market trends and innovations in Cybersecurity and technology.

Other Duties :

Additional Job Description

Required Qualifications :

Preferred Qualifications :

Knowledge, Skills, and Abilities :

Salary : $130,000 - $155,000