Chief Information Security Officer (CISO) - Americas

Chief Information Security Officer (CISO) - Americas

Get AI-powered advice on this job and more exclusive features.

This range is provided by Ant International. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$200,000.00 / yr - $300,000.00 / yr

We are seeking a Chief Information Security Officer (CISO) to lead and oversee our cyber and information security programs in the Americas.

Responsibilities

Develop and maintain cyber security strategy, security policy, security architecture, and security risk management process.

Ensure detailed cyber security standards and procedures are established and implemented.

Monitor compliance with cyber security regulations, policies, standards and procedures.

Work with Legal, Compliance, Audit, Privacy and IT Technology functions in audit and inspection projects to assure compliance with regulations and industry security certification programs.

Lead to deliver risk-based security solutions in a business context. Review and ensure security requirements of all Data, Applications (SDL), Cloud and Infrastructure (network, system, database) are compliant with cyber security and compliance standards.

Lead a team to perform local day to day security operations to defend against cyber threats.

Proactively support other functions on cyber security, including security requirements for important projects, security review and third-party risk management.

Measure and report KRIs on security compliance, security awareness program and key security improvements.

As member of Risk Management Committee to present, advise security risk postures and recommendations.

Be a focal point for business / product / technology to understand challenges and security impacts, and help stakeholders make well-informed decisions.

Requirements

Experience in a similar Director of Information Security or CISO position, preferably in the Financial Services sector.

Demonstrable experience running security compliance programmes.

Experience maintaining compliance with information security standards and regulations such as PCI DSS, ISO27001, and NIST Cyber Security Framework.

Good security foundation knowledge and practices in identity and access management, authentication, authorization, crypto, protocol security, perimeter security, OS hardening, threat intelligence, vulnerability assessment and penetration testing.

Strong stakeholder management skills, working across the regional and global team to leverage knowledge and resources from this network to get things done.

Excellent relationship building and communication skills with the ability to engage people from diverse cultures and different levels.

Preferably with either CISSP, CISA, CRISC certification.

Must be fluent in the English language both written and verbal.

#J-18808-Ljbffr