Information Security Officer

About the role

We are looking for a senior Information Security Officer to lead the development and execution of our enterprise security strategy, ensuring alignment with business goals, risk appetite and regulatory requirements.

Key responsibilities

• Develop and maintain the company’s information security and cybersecurity strategy, roadmap and maturity plan.
• Establish, maintain and enforce security policies, standards, procedures and governance practices.
• Identify, assess, prioritize and report cyber risks across applications, infrastructure, cloud services and third‑party relationships.
• Provide oversight of security operations including monitoring, detection, vulnerability management and endpoint protection.
• Own cyber incident response governance, investigation, containment and recovery processes.
• Lead governance, risk and compliance activities to meet internal and external requirements.
• Oversee identity, access and data protection controls such as privileged access, data loss prevention and encryption.
• Promote security awareness, training and phishing readiness across the organisation.

Required profile

• Bachelor’s degree in Information Security, Computer Science, IT or related discipline and relevant security certifications.
• 8‑10 years of experience in information security, cybersecurity or IT risk management.
• At least 5 years in a senior security leadership or specialist role.
• Proven track record developing security strategies, policies and governance frameworks.
• Experience conducting risk assessments, audits, compliance reviews and managing security incidents.

Required skills

• Cloud security and cloud adoption
• Network segmentation
• Identity and Access Management (IAM)
• Data protection and encryption
• Application security
• Vulnerability management
• Endpoint protection
• Security Information and Event Management (SIEM)
• Threat intelligence
• Data loss prevention
• Privileged access management