Chief Information Security Officer (CISO) Job Description

The Chief Information Security Officer (CISO) is a senior-level management position responsible for overseeing an organization’s information security.

The CISO may be either the head of information technology or the head of the security department.

Job Brief:

We’re looking for a Chief Information Security Officer to lead and oversee our organization’s information security program. This includes developing and implementing security policies and procedures, managing security technologies and overseeing security awareness training. The ideal candidate will have extensive experience in information security, including experience with security risk management, incident response and forensics.

Chief Information Security Officer (CISO) Duties:

• Manage all security operations for the IT/IS department.
• Set and enforce compliance regulations and standards
• Develop information security policies
• Develop policies, procedures, and standards
• Maintain adequate controls
• Maintain data confidentiality
• Enforce regulations, procedures, standards, and policies
• Monitor and continuously assess risk
• Control and document all activities performed by employees
• Provide guidance and direction for all IT/IS staff
• Advise management on IT/IS costs and budgets
• Develop, implement, and adhere to a company code of conduct
• Develop, implement, and adhere to a company code of ethics
• Approve all employee IT/IS access requests
• Provide IT/IS departmental and project specific oversight
• Provide IT/IS project management support
• Proactively identify

Chief Information Security Officer (CISO) Responsibilities:

• Serve as the company’s lead information security officer, overseeing all security initiatives, policies, and procedures
• Develop, implement, and monitor information security policies and procedures
• Develop and implement information security strategies including vulnerability assessments and penetration testing, and cybersecurity awareness and training
• Translate IT security risks into actionable requirements
• Develop and maintain an information security budget and oversee IT spending
• Research emerging security threats and vulnerabilities and advise management on appropriate countermeasures
• Create and implement strategic plans to secure the company’s IT infrastructure
• Perform risk assessment and vulnerability analysis
• Promote the company’s information security reputation
• Evaluate adequacy of third-party service providers
• Perform IT asset inventories and provide detailed reports for budgetary purposes
• Develop and implement security incident response plans
• Monitor and audit IT and company records
• Award IT contracts and ensure compliance with contract terms
• Develop and enforce IT

Requirements And Skills:

• Bachelor’s degree in computer science, information security, or related field
• 3+ years of proven experience at the highest level of information security management
• Proven leadership, problem-solving, and critical thinking abilities
• Proven ability to establish and implement information security policies and procedures
• Experience with IT security risk assessment and mitigation

Company Name is proud to be an Equal Opportunity Employer. We believe that diversity and inclusion are key to building a successful team. We encourage applications from people of all races, religions, national origins, genders, and ages, as well as veterans and individuals with disabilities.