Chief Information Security Officer (CISO)

We are looking for an experienced Chief Information Security Officer (CISO) to lead and further develop the cybersecurity and information security strategy of our Group of Companies.

The CISO will be responsible for information security governance, cybersecurity risk management, regulatory compliance, incident response, and the Group’s overall cyber resilience, working closely with Senior Management, IT teams, business units, and external partners.

Key Responsibilities

• Lead the Group’s cybersecurity strategy, governance, policies, and security framework.
• Ensure compliance with NIS2 and applicable regulatory requirements.
• Lead cybersecurity risk assessments, maintain the Risk Register, and recommend mitigation measures.
• Oversee security incident response, vulnerability management, penetration testing, and remediation activities.
• Coordinate security audits, assessments, and third-party risk management.
• Support Business Continuity and Disaster Recovery planning and testing.
• Develop and oversee security awareness and phishing simulation programs.
• Provide regular cybersecurity, risk, and compliance reporting, including KPIs and KRIs, to Senior Management

Requirements

• Proven experience in a senior cybersecurity / information security leadership role.
• Strong knowledge of ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK.
• Experience with SIEM, SOC operations, Incident Response, threat intelligence, IAM/PAM, and vulnerability management.
• Experience in on-premises, cloud, and hybrid security environments, including AWS, Azure, and/or GCP.
• Good understanding of GDPR, NIS2, DORA, ISO 37001, and PCI DSS.
• Experience in business continuity, disaster recovery, and cyber resilience.
• Strong analytical, communication, leadership, and stakeholder management skills.
• Excellent command of English, written and spoken.