About This Role
As a security leader, you will foster a culture of security awareness across the organization. You will contribute to developing and implementing a comprehensive information security strategy that addresses evolving business risks and empowers teams to deliver their priorities.
You will lead collaboration with stakeholders to communicate and embed secure practices into daily work routines, ensuring the protection of assets and the delivery of prioritized objectives. This includes detecting and responding to incidents, strengthening defenses, reducing the attack surface, highlighting potential risks to the business, and promoting security as an integral part of every team member's role.
You will drive adoption of and adherence to security policies, standards, and controls through expert guidance and advice. Protect critical assets and ensure rigorous testing is in place to maintain the highest level of assurance. Ensure effective security operations, such as vulnerability scanning and patching, are executed efficiently.
Manage risk in a pragmatic and cost-effective manner to ensure stakeholder confidence. Report on the overall effectiveness of the security program against defined key performance indicators and drive continuous improvement.
This role requires strong working relationships and influencing skills to collaborate with business and IT teams across various domains. Building trust and credibility is essential to achieve our shared goals.
Security is everyone's responsibility, and we prioritize secure behaviors in everything we do.
About You
* Demonstrated experience leading an information security capability for a large-scale business unit or organization.
* Good understanding of security within agile development processes and cloud-based infrastructure.
* Adept knowledge of security operations, incident management, and compliance frameworks.
* Proven experience implementing Information Security Management Systems (ISMS) in complex environments.
* Certifications in AWS Cloud Fundamental or Practitioner, ISO27001 Lead Implementer, COMPTIA Security+, CISMP/CISSP/CISM/CISA, or similar preferred.
* Good grasp of international regulatory requirements, particularly data privacy and confidentiality.
* Familiarity with industry standards and frameworks like ISO, NIST, PCIDSS, OWASP, ITIL, and COBIT.
* Excellent planning and organizational skills to determine effective course of action and meet objectives.
* Strong communication skills to engage stakeholders and reduce information security risks.
* Interpersonal and relationship skills to collaborate effectively with technical and non-technical colleagues worldwide.
* Goal-oriented focus to maintain momentum on agreed Information Security objectives and deliverables.
* Problem-solving skills to identify creative solutions supporting Information Security Governance, Risk, and Compliance activities.
* Logical thinker and team player able to navigate problem situations effectively.
* Commercial acumen to make informed decisions and support strategic planning.
* Awareness of organizational structures to identify decision-makers and influencers.
* Ability to understand needs, objectives, and constraints of other teams and departments.
We strive to create an inclusive environment where everyone feels valued and empowered to contribute their best work.