Group Chief Information Security Officer (CISO)

About the role

The Group CISO leads the organisation's global cybersecurity and information security function, providing strategic direction, governance and operational leadership. Reporting to executive leadership, the CISO ensures protection of information assets while supporting business growth and digital transformation.

Key responsibilities

• Define and execute an enterprise cybersecurity strategy aligned with business objectives.
• Establish security policies, standards and governance frameworks.
• Advise senior leadership on cyber risks, threats and security investments.
• Oversee security monitoring, threat detection, incident response and recovery.
• Lead vulnerability management, threat intelligence and security operations.
• Define security architecture standards and embed security into technology design.
• Drive adoption of Zero Trust, Cloud Security, IAM and SASE.
• Manage cybersecurity risks across vendors and third‑party partners.
• Build and lead a high‑performing cybersecurity team and foster a culture of security awareness.

Required profile

• Bachelor's degree in Information Security, Computer Science, IT, Business or related field.
• 10‑15+ years of progressive cybersecurity leadership experience in large, global organisations.
• Relevant certifications such as CISSP, CISM, CISA or CCISO preferred.
• Proven track record of leading enterprise‑wide security programs and managing risk, compliance and incident response.

Required skills

• Zero Trust architecture
• Cloud Security
• Identity and Access Management (IAM)
• Secure Access Service Edge (SASE)
• Vulnerability Management
• Threat Intelligence
• Security Monitoring
• Incident Response
• Security Architecture
• Security Tooling