Chief Information Security Officer (CISO) – Europe Hub

Job description

Tasks

• Supporting the Group CISO in shaping the global cybersecurity strategy and implementing it in the region, taking into account local requirements and regulatory expectations
• Driving and supporting security transformation programs and ensuring continuous improvement of security capabilities
• Maintenance and improvement of the information security governance framework
• Ensuring compliance with relevant regulations and industry standards (e.g., ISO 27001, NIST, EBA guidelines)
• Monitoring of security policies, standards, and procedures in the region
• Identifying, assessing, and monitoring cyber risks to ensure effective risk mitigation strategies
• Independent review and monitoring of security controls and risk assessments
• Reporting on the security situation and risk exposure to senior management and the board of directors
• Management of regional incident response and crisis management activities
• Advising executives on cybersecurity issues

Technology risk control

• Establishment and management of the technology risk control function for Europe, in line with the global structure
• Ensuring effective governance and monitoring of technology-related risks, including risk assessments

Requirements

• Experienced information security executive within financial services or a highly regulated industry
• Strong knowledge of cybersecurity frameworks, regulatory requirements, and emerging threats
• Enthusiasm for cyber and technology risks and willingness to build up the newly established function and make it successful
• A person who is action-oriented and can independently drive initiatives and tasks forward
• Degree in information security, risk management, or information technology; professional certifications such as CISSP, CISM, or CRISC preferred
• At least 5-10 years of professional experience in information security and risk management, preferably within the financial sector
• Knowledge of regulatory standards and landscape
• Knowledge of technologies and emerging risks such as cloud, AI, robotics, etc.
• Excellent working knowledge of Microsoft Office, SharePoint, and JIRA
• Experience with analysis and visualization tools (e.g., Tableau) is a plus
• Strong interpersonal, communication, and influencing skills, with the ability to interact at the highest levels

We offer