Chief Information Security Officer

About the role

We are looking for an accomplished Chief Information Security Officer (CISO) to lead Cybersecurity, Technology Risk, and Cyber Resilience across a fast‑moving technology organisation. This senior, strategic role requires a strong engineering background combined with extensive experience in technology risk, governance, and executive leadership.

Key responsibilities

• Develop and execute the enterprise Cybersecurity, AI Security and AI Risk Management strategy.
• Establish governance frameworks, controls and oversight for secure adoption of Generative AI, LLMs, Agentic AI and Machine Learning platforms.
• Define enterprise standards and guardrails for AI development, deployment and usage, aligning with regulatory expectations.
• Partner with Technology, Data, Product and Innovation teams to enable responsible AI adoption while managing security, privacy, compliance and operational risks.
• Maintain and enhance security governance, technology risk management, cyber resilience and control frameworks.
• Develop risk appetite, Key Risk Indicators (KRIs) and executive reporting for senior management and board committees.
• Advise executive leadership on emerging threats, technology risk and resilience.
• Embed security throughout technology delivery lifecycles using secure‑by‑design and DevSecOps principles.
• Drive modernization of security capabilities through automation, AI‑driven controls and cloud‑native security practices.
• Engage with regulators, auditors and external stakeholders to ensure compliance with regulatory expectations and industry frameworks.

Required profile

• Degree in Computer Science or a related technical discipline.
• Extensive senior‑level experience building and scaling security capabilities in complex technology environments.
• Proven track record as a trusted advisor to executive leadership, boards and regulators.
• Strong background in technology risk, governance and executive leadership.

Required skills

• AI security and AI risk management
• DevSecOps and secure‑by‑design practices
• Cloud‑native security and automation
• Security governance frameworks
• Risk appetite definition and Key Risk Indicators (KRIs)