Chief Information Security Officer

The Chief Information Security Officer (CISO) is responsible for establishing, executing, and continuously evolving the enterprise cybersecurity and information risk management strategy. The CISO provides executive leadership for the protection of customer, policyholder, employee, and corporate information assets while enabling business growth, innovation, digital transformation, and regulatory compliance.

The CISO serves as a trusted advisor to executive leadership and the Board of Directors, ensuring cybersecurity risks are effectively identified, managed, communicated, and aligned with the organization's strategic objectives. The role oversees enterprise security governance, cyber defense, privacy collaboration, operational resilience, and regulatory readiness across all business units.

• →Develop a risk-based cybersecurity strategy, roadmap, and governance framework aligned with business objectives, informed by ongoing assessments of cybersecurity maturity, control effectiveness, and organizational capabilities.
• →Continuously assess and optimize the cybersecurity organization's structure, capabilities, and resource allocation to address evolving business, technology, regulatory, and threat landscape requirements
• →Oversee the planning, execution, and performance tracking of the enterprise cybersecurity portfolio, ensuring strategic initiatives are delivered on time, within budget, and aligned with organizational risk management and business objectives.
• →Build, scale, and mature enterprise security operations capabilities, including security monitoring, threat intelligence, threat detection, incident response, vulnerability management, cyber resilience, and recovery readiness to effectively identify, contain, and mitigate cyber threats.
• →Lead the organization's response to cybersecurity incidents, ensuring effective containment, recovery, stakeholder communication, and continuous improvement.
• →Partner with business and technology leaders to identify, assess, and remediate security risks across infrastructure, applications, cloud environments, and third-party relationships.
• →Advise executive leadership and the Board on cybersecurity risks, emerging threats, and strategic security investments.
• →Promote a culture of security awareness, accountability, and regulatory compliance across the organization.

• Bachelor's degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related discipline.
• Minimum 15 years of progressive information security and technology leadership experience.
• Minimum 8 years of executive-level cybersecurity leadership experience.
• Proven success leading and maturing security operations functions, including incident response, threat management, security monitoring, and cyber resilience capabilities.
• Hands-on experience managing significant cybersecurity incidents and coordinating enterprise-wide response and recovery efforts.
• Deep understanding of enterprise security architecture, cloud security, identity and access management, application security, data protection, and regulatory compliance frameworks.
• Strong executive presence with the ability to communicate complex security risks and business impacts to senior leadership and boards.
• Experience managing security budgets, organizational strategy, and high-performing cybersecurity teams.

• Professional certifications such as: CISSP, CISM, CISA, CRISC, CCSP