CISO

The Chief Information Security Officer (CISO) is responsible for updating and ensuring compliance of existing security policies in line with the European NIS2 directive. The role focuses on enhancing the organization’s cybersecurity posture and governance to ensure resilience against cyber threats and regulatory alignment.

Specific Duties and Responsibilities:

Policy Management and Updates:

• Review, update, and formalize the organization’s security policies to meet NIS2 standards.
• Ensure policies are consistent with internal practices and regulatory requirements.

NIS2 Compliance Oversight:

• Implement processes to ensure compliance with the NIS2 directive.
• Conduct regular audits and evaluations to identify and address gaps in compliance.

Risk Analysis and Security Governance:

• Conduct security risk assessments and define corrective actions.
• Develop tools and dashboards to monitor security and compliance performance.

Training and Awareness:

• Deliver training sessions and raise awareness within teams regarding updated security policies.
• Provide regular reports to senior management on compliance progress and risk levels.

Operational Security Management:

• Lead internal and external security audits to meet regulatory deadlines.
• Coordinate responses to security incidents to minimize impact and ensure lessons learned are applied.

Competencies and Qualifications:

Top 5 Competencies:

• NIS2 Compliance Expertise: In-depth understanding and hands-on experience with NIS2 requirements and implementation.
• Policy Management: Proven track record of creating, updating, and managing security policies.
• Risk Management: Strong experience in risk assessments, mitigation strategies, and regulatory reporting.
• Leadership and Communication: Ability to train teams, communicate technical topics effectively, and engage stakeholders.
• Audit and Governance: Experience in conducting security audits and aligning operations with compliance standards.

Educational Background:

• Bachelor’s or Master’s degree in Cybersecurity, Information Systems, or a related field.
• Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer/Auditor are strongly preferred.

Professional Experience:

• Minimum 8–10 years of experience in information security leadership roles.
• Proven expertise in regulatory compliance (e.g., NIS2, GDPR, ISO 27001).

Growth and Skill Enhancement Opportunities:

Technical Skills to Develop:

• Automation of compliance audits.
• Integration of governance, risk, and compliance (GRC) tools.
• Advanced security architecture for critical systems.
• Development of risk monitoring dashboards.
• Incident management with real-time advanced tools.

Soft Skills to Develop:

• Strategic leadership in cybersecurity.
• Crisis communication for executive leadership.
• Change management within large organizations.
• Simplifying technical concepts for non-technical stakeholders.
• Cross-functional team collaboration.

Interested in this challenge? Apply today!