Chief Information Security Officer

Tasks

The position of Chief Information Security Officer (CISO) entails full responsibility for information security and identity and access management at Man Group. This is a leadership role aimed at driving change across the entire company while leading the security function. Responsibilities include:

• Developing and implementing an information security strategy to align security investments with the company's risk profile
• Promoting a culture of safety and safety awareness throughout the company through training, engagement, and communication
• Establishing and enforcing security standards in the areas of technology, operations, and business—not just within IT
• Working with teams across the company to understand existing processes and integrate secure access into existing systems
• Promoting the adoption of artificial intelligence and new technologies by establishing practical security guidelines for their design, development, and deployment
• Responsibility for information security and IAM risks and controls, including the identification, assessment, and tracking of risks

Identity and Access Management

Tasks in the area of Identity & Access Management include:

• Developing and implementing the IAM strategy and transformation plan to drive the migration from a legacy deployment to a modern, governed identity platform
• Ensuring the continuous implementation of identity management, including application onboarding, lifecycle automation, access controls, and defense against targeted attacks on APIs
• Addressing Audit Findings Related to Identity and Access Management

Governance & Reporting

Responsibilities in the area of Governance & Reporting include:

• The Leadership of the Information Security Steering Committee
• Providing information on security risks, threats, and software updates to the supervisory board and the risk and finance committee
• Monitoring risk management at third-party providers in coordination with the dedicated TPRM team
• Support for the IS Audit Function

Requirements

The position requires:

• A "builder's mindset" that makes it possible to balance competing priorities
• A solid understanding of technical security implementations, trade-offs, APIs, and architectural patterns, as well as a basic understanding of business-driven application security
• Proven experience in a senior information security role, ready to assume the full responsibilities of a CISO
• The ability to confidently drive change (impacting technology, operations, and the business) to lead teams in delivering security solutions
• Strong communication skills, comfortable presenting to supervisory boards and, at the same time, in a technical design setting

Further requirements

The following additional qualifications are a plus:

• CESIP Certification
• Experience with identity management platforms and large-scale IAM transformation programs
• Familiarity with information security frameworks (N