Chief Information Security Officer
Andersen Steinberg is currently resourcing for an opening for a strategic hire into our client’s senior management team. We are looking for a Chief Information Security Officer for a FTSE 100 and Fortune 500 company, to provide leadership across the global organisation on InfoSec Strategy and management, practices and activities.
You will provide practical subject matter expertise to the ongoing implementation and maintenance of a compliant information security posture through strong application of security governance, risk assurance and compliance activities. You will lead a growing function of InfoSec and Cyber specialists managing business and compliance risks, protecting business critical processes and applications, and continuously maturing and developing the information security architecture for the organisation.
Responsibilities:
- Knowledge of Regulatory practices including Data Protection, GDPR
- Accountability for all associated security day to day activities
- Development and Maintenance of all Info Sec Policies, Procedures and relevant standards and supporting documentation
- Deliver Information Security Assessments for clients and third parties
- Chairing internal and client-facing Security Working Groups and project meetings and facilitating internal security compliance reporting
- Proactively identifying information security deficiencies & opportunities for improvement and facilitating development of pragmatic solutions
- Manage the training, induction, and awareness program for employees
- Provide advisory and consulting support to help the firm improve its security posture and adhere to security policies, expected controls & regulatory requirements
- Ability to communicate effectively to technical and non-technical audiences
- Experience of modern Cloud platforms i.e. Azure, AWS or Google
- Business Continuity and/or Disaster Recovery planning
- Support and contribution to new bid opportunities, providing security and data protection expertise in developing new solutions for tenders.
- Risk and threat Assessments for infrastructure and software development
- Ability to conduct the role with a large degree of independence and integrity.
- A solid background in designing and implementing Information Security Management Solutions
- A deep understanding of GDPR and EU Data Privacy matters
- Recognised IS qualifications (e.g. CISSP, CISM, CISMP or equivalent)
- Proven track record as a senior InfoSec professional, delivering into global organisations and native cloud environments
