Chief Information Security Officer (CISO)

Job Description

1. Drive information security and cybersecurity assurance program.
2. Review information systems security controls against possible cyber threats and work with stakeholders on remediation.
3. Conduct verification and validation to ensure risks are mitigated.
4. Provide cybersecurity risk advisory to projects, including providing recommendation of risk mitigation options.
5. Review cybersecurity measures against possible threats learnt from external incidents and intelligence sources and work with stakeholders on addressing potential gaps.
6. Perform regular monitoring and reporting of cybersecurity risk landscape.
7. Provide regular dissemination of cybersecurity risk advisories for staff.
8. Drive regular cybersecurity risk metrics reporting and monitor key risk indicators.
9. Manage cybersecurity incidents. Ensure timely management reporting and provide regular updates to senior management and relevant stakeholders.
10. Conduct cybersecurity tabletop exercises improving organisational cyber resilience.
11. Provide cybersecurity awareness training ensuring employees understand cyber risks, recognise threats and able to protect organisational assets.
12. Plan and execute simulated phishing exercises to assess employee awareness.

Requirements

1. Relevant degree in Information Security and/or Cybersecurity.
2. CISSP, CISA, CRISC, CCSP and/or OSCP advantageous.
3. More than 6 years of hands-on experience in information security and cybersecurity roles.
4. Good knowledge and experience in computer security, network security and application security.
5. Familiarity in medical device security advantageous.
6. Experience in leading cybersecurity risk identification and analysis and recommending risk reduction measures using NIST CSF and MITRE ATT&CK.
7. Good knowledge and experience with regulatory requirements pertaining to cybersecurity.
8. Strong analytical skills for threat modelling and risk assessment.
9. Good influencing skills with stakeholders, within department and across departments.
10. Ability to contribute through others, collaborate well across seniority, cultures and locations.
11. Good written and communication skills with ability to interact and engage with stakeholders and all levels of management.