Chief Information Security Officer

Description

We’re looking for a strategic and forward-thinking Chief Information Security Officer (CISO) to lead a comprehensive cybersecurity and risk management program across a multi-agency public sector environment.
As the CISO, you’ll shape the organization’s cybersecurity vision, safeguard critical digital infrastructure, ensure compliance with data protection regulations, and build a culture of resilience. This is a rare opportunity to impact national-level cybersecurity and influence policy at the highest levels.

Responsibilities:

• Develop and maintain an enterprise-wide information security governance framework aligned with international standards.
• Lead and manage the information security function, including a direct team and broader dotted-line reports.
• Regularly report on the state of cybersecurity risk and controls to executive teams and governing bodies.
• Collaborate with vendor management and procurement functions to integrate security requirements in all contracts.
• Manage the department’s budget and ensure efficient allocation of resources.
• Define the vision and strategic roadmap for information security, ensuring alignment with organizational objectives.
• Lead efforts to integrate unsupported or unsanctioned IT services into formal risk governance.
• Manage security risk assessments and oversee regulatory compliance initiatives.
• Support legal, data privacy, and audit teams in mitigating compliance-related cybersecurity risks.
• Maintain a current and robust information security framework, informed by standards such as NIST CSF.
• Oversee the creation and lifecycle of all relevant security policies, procedures, and role-based access controls.
• Maintain relationships with law enforcement and external cybersecurity bodies for threat intelligence and response coordination.

Requirements:

• Master’s degree in Information Science, Business Administration, or a related field.
• Professional certifications such as CISSP, CISM, CISA or equivalent are required.
• Minimum 8 years experience of combined experience in information security, risk management, or IT leadership roles.
• Minimum of 5 years in a senior executive or team leadership capacity.
• Deep understanding of cybersecurity principles, technologies, and risk management strategies.
• Familiarity with frameworks and standards such as NIST, ISO/IEC 27001, COBIT, and ITIL.
• Experience with incident management, security architecture, threat intelligence, and business continuity planning.
• Strong command of data protection regulations, including GDPR and similar legislation.
• Visionary leader and strategic thinker with a proven ability to align security initiatives with business goals.