Position Summary:
The Chief Cyber Security Officer (CCSO) is responsible for establishing and leading the organization's cybersecurity vision, strategy, governance framework, and operational security capabilities. The CCSO will safeguard the enterprise's digital assets, technology infrastructure, customer data, and business operations against evolving cyber threats while ensuring regulatory compliance and business resilience.
Job Descriptions:
1. Cyber Security Strategy & Security Architecture
- Define and execute enterprise cybersecurity strategy aligned with business objectives and risk appetite.
- Establish security architecture principles, standards, and secure-by-design frameworks across all systems.
- Build the long-term cybersecurity roadmap supporting digital transformation, cloud, AI, and platform initiatives.
2. Security Operations & Incident Response
- Lead enterprise SOC, threat monitoring, detection, and response capabilities.
- Own incident response, cyber crisis management, and recovery frameworks.
- Ensure continuous vulnerability management, security monitoring, and resilience testing.
3. Cyber Risk, Governance & Regulatory Compliance
- Establish enterprise cyber risk management framework and risk governance model.
- Ensure compliance with cybersecurity, data protection, and industry regulatory requirements.
- Lead audits, policy governance, third-party risk management, and control assurance activities.
4. Identity, Data Protection & Fraud Prevention
- Govern Identity & Access Management (IAM), Zero Trust, and privileged access controls.
- Implement Data Loss Prevention (DLP) and protect sensitive enterprise data assets.
- Prevent cyber fraud, insider threats, and unauthorized access across systems and platforms.
5. Digital Trust, Cyber Resilience & Executive Reporting
- Build enterprise cyber resilience, business continuity, and disaster recovery capabilities.
- Strengthen digital trust with customers, partners, and regulators through robust security posture.
- Provide regular cybersecurity reporting, risk insights, and recommendations to CEO and Board.
Qualifications:
- MBA/ Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or a related field. PhD is highly preferred
- Minimum 15 years of progressive experience in Cybersecurity, Information Security, Technology Risk, or related domains.
- At least 5 years in executive or senior leadership roles responsible for enterprise-wide cybersecurity strategy and operations.
- Proven experience leading Security Operations, Incident Response, Threat Intelligence, Cyber Risk Management, and Security Governance functions.
- Strong expertise in security architecture, cloud security, IAM, Zero Trust, data protection, and fraud prevention.
- Demonstrated experience in cybersecurity regulatory compliance, audit management, and risk governance.
- Experience building and leading high-performing cybersecurity teams in complex enterprise environments.
- Industry certifications such as CISSP, CISM, CRISC, CCSP, GIAC, CISA, or equivalent are strongly preferred.
- Experience within Financial Services, Fintech, Banking, Insurance, Telecommunications, E-commerce, Digital Platforms, or other highly regulated industries is strongly preferred.
- Strong executive presence with the ability to communicate complex cybersecurity topics to Board members and non-technical stakeholders.
