Group CISO

The Chief Information Security Officer (CISO) is responsible for leading the organisation's global cybersecurity and information security function. This role provides strategic direction, governance, and operational leadership to ensure the protection of information assets, technology platforms, and digital operations while enabling business growth and transformation. As a trusted advisor to executive leadership, the CISO will drive cybersecurity strategy, risk management, regulatory compliance, security operations, and organisational resilience, while fostering a culture of security awareness and accountability across the enterprise.

Key Responsibilities

Strategy & Governance

• Define and execute the enterprise cybersecurity strategy aligned with business objectives.
• Establish and maintain security policies, standards, and governance frameworks.
• Advise executive leadership on cyber risks, threats, and security investments.
• Lead enterprise-wide cyber risk management and compliance activities.

Security Operations & Resilience

• Oversee security monitoring, threat detection, incident response, and recovery capabilities.
• Lead vulnerability management, threat intelligence, and security operations activities.
• Ensure robust incident response, crisis management, and business continuity preparedness.

Architecture & Technology

• Define enterprise security architecture standards and embed security into technology design and delivery.
• Drive adoption of modern security practices including Zero Trust, Cloud Security, IAM, and SASE.
• Oversee cybersecurity technology investments and security tooling.

Leadership & Culture

• Build and lead a high-performing cybersecurity team.
• Foster a strong culture of security awareness and accountability.
• Partner closely with business and technology leaders to integrate security into operations and decision-making.
• Establish scalable security processes, governance, and operating disciplines.

Third-Party Risk Management

• Manage cybersecurity risks across vendors, suppliers, and external partners.
• Ensure security requirements are embedded within procurement and outsourcing arrangements.

Success Measures

• Reduction in cybersecurity incidents and risk exposure.
• Improvements in MTTD and MTTR metrics.
• Successful audit and compliance outcomes.
• Increased cybersecurity maturity against recognised frameworks (e.g., NIST CSF, ISO 27001).
• Strong incident response readiness and organisational resilience.
• High stakeholder confidence in the cybersecurity function.
• Development of a high-performing and engaged cybersecurity team.

Experience & Qualifications

• Bachelor's degree in Information Security, Computer Science, IT, Business, or related field.
• CISSP, CISM, CISA, CCISO, or equivalent certifications preferred.
• 10–15+ years of progressive cybersecurity and information security leadership experience.
• Proven experience leading enterprise-wide cybersecurity programs in complex, global organisations.
• Strong knowledge of cyber risk management, security operations, cloud security, enterprise architecture, and regulatory compliance frameworks.

Leadership Attributes

• Strategic and commercially minded leader with strong business acumen.
• Exceptional stakeholder management and communication skills, with the ability to influence at executive and board level.
• Detail-oriented with high standards of quality, rigour, and execution.
• Proven ability to build, develop, and lead high-performing teams.
• Comfortable operating in both strategic and hands-on environments, including building security capabilities and governance structures from the ground up where required.