Chief Information Security Officer

**Ready and hungry for a new adventure? You are definitely in the right place
We at
**Envision Employment Solutions** are always on the look for top talents around the globe and matching them with our partners' hiring needs, to help them build and scale
- Our partners offer awesome work environment, competitive salaries, full benefits, and many others perks.**Our Hiring Process**:
**2. **During the call we will go through your resume and discuss the opportunities we have for you in details. We would love to learn a little bit about you, about your work experience and your career's goal. We will also be able to answer any questions you might have.

**Please feel free to share our career site with any of your colleagues or anyone you know that might be looking for a job**:

- ____________________________________________________

**Envision Employment Solutions** is currently looking for a
** Chief Information Security Officer [CISO] **for one of our partners, a very well-known Company.

**Job Summary**:
Our partner is looking for a Chief Information Security Officer (CISO) who will manage global threat and cyber risk assessments related to their scope/unit, defines cybersecurity plan and ensures compliance to Group Cybersecurity Policies. The unit’s cybersecurity plan is managed based on the NIST Framework structure (Identify, Protect, Detect, Response and Recover) and ISO 27001:2013 standard.

The CISO is also the escalation point for delivery and staff-based security incidents. Country CISOs own the relationship with country security agencies.

The CISO collaborates with Unit's / Country / Region DPO

**Define scope of responsibility for the entity**
- Understand the scope of Business Line’s portfolio & offerings, client landscape, assets managed by Business Line and Group
- Implement Cybersecurity SPOC within countries where the Entity is present

**Responsibilities**:

- Deploying governance & policy framework aligned with local legislation
- Organizing and managing communication/awareness/education
- Controlling compliance to Baseline Policy
- Conduct and support security assessments and gap analysis
- Monitoring exceptions and remediation plans
- Leading the ISO 27001 certification plan
- Managing the Cybersecurity audits requested by customers & monitor that engagements define appropriate remediation actions
- Supporting projects and procurement team to assess cyber risks for third-parties
- Identifying, controlling and reporting security incidents, leading remediation activities and representing the organization during the crisis communication process
- Defining and monitoring Cybersecurity KRI and KPI for the unit
- The CISO manages the unit’s cybersecurity resources and budget

**Requirements**:

- 10+ of years experience in the IT Services Space.
- Well versed with their Business Lines portfolio and offering
- Well versed with client landscape, especially clients with ODCs, ODCs, dedicated client networks, to evaluate security risks exposure
- Well versed with client engagements where Business Line is providing Cybersecurity based services
- Risk management based thought process and approach for handling security incidents
- Very good communication skills (both spoken, written)
- Ability to shape their work agenda based on priority of a task
- Well versed with assets managed by the Business Lines (which are not part of Group IT assets); this will support the CISO to ring fence their scope & boundary for policy implementation
- Well versed with client contracts with security obligations
- Well versed with Capgemini Group Cybersecurity policies, and their applicability w.r.t all the points stated above,

**Certifications**:

- ISO / IEC 27001 Lead Implementor or Auditor
- Certified Information System Security Professional (CISSP)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)

**Envision Employment Solutions is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. Come join us