The Chief Information Security Officer (CISO) is a senior leadership position reporting directly to the CEO, responsible for ensuring the security, confidentiality, and integrity of the company’s digital assets. The CISO develops and executes a comprehensive cybersecurity strategy to mitigate risks, enhance threat detection and response, and ensure regulatory compliance. This role oversees the cybersecurity product portfolio, architecture, operations, and financial performance while collaborating with internal and external stakeholders to align security measures with organizational objectives. The ideal candidate should have experience building and selling cybersecurity solutions.
Key Responsibilities
Strategic Responsibilities
- Cybersecurity Strategy Development
- Develop and execute a comprehensive cybersecurity strategy aligned with the company’s long-term goals.
- Establish a robust cybersecurity framework to address evolving threats and support business objectives.
- Represent cybersecurity interests in leadership meetings and drive security-related business decisions.
- Product/Domain P&L Management
- Take ownership of the cybersecurity product portfolio's profitability and growth.
- Develop strategies to drive sustainable revenue growth while maintaining customer value.
- Collaborate with finance and sales teams to manage revenue forecasting, budgeting, and cost optimization.
- Regulatory Compliance and Risk Management
- Ensure adherence to local, regional (GCC), and international cybersecurity regulations and standards.
- Assess organizational risk, prioritize mitigation strategies, and communicate risk posture to the executive team.
- Industry Leadership and Innovation
- Drive innovation by keeping abreast of emerging cybersecurity technologies and practices.
- Foster partnerships with technology vendors, service providers, and regulatory authorities.
- Represent the company at industry events and forums to strengthen its cybersecurity leadership.
Operational Responsibilities
- Cybersecurity Operations
- Oversee 24/7 monitoring of cybersecurity platforms, ensuring proactive threat detection and incident management.
- Drive timely incident resolution and SLA compliance while optimizing operational processes.
- Develop self-service tools and automation capabilities to enhance customer satisfaction and operational efficiency.
- Architecture and Solution Design
- Lead the development of tailored cybersecurity solutions to meet client-specific needs.
- Collaborate with engineering and development teams to ensure the design and delivery of secure platforms.
- Regularly review and refine architectural blueprints to align with emerging threats and best practices.
- Delivery Excellence
- Manage project delivery to meet scope, SLAs, and budget while identifying opportunities for process optimization.
- Act as the primary interface with partners and stakeholders to streamline incident management and service delivery.
- Drive continuous improvements to achieve superior customer satisfaction.
- Product Management
- Oversee the entire lifecycle of cybersecurity products, from concept development to commercialization.
- Continuously optimize products and platforms through structured release management processes.
- Incorporate market and customer feedback to maintain a competitive edge.
- Team Leadership and Collaboration
- Lead and mentor a high-performing cybersecurity team, fostering a culture of excellence and collaboration.
- Partner with internal teams (e.g., strategy, cloud, and data center teams) and external entities to achieve business goals.
Position Requirements
Qualification & Experience :
- Minimum of 12 years of leadership experience in cybersecurity, preferably within the ICT sector.
- Proven expertise in developing cybersecurity frameworks, strategies, and solutions.
- Extensive experience working with cloud, IoT, system integration, and emerging cybersecurity technologies.
- Proven experience in product management – concept to implementation with profitability.
- Strong strategic thinking and risk management capabilities including demonstrated experience in developing/articulating vision for the offerings/solutions including potential risk assessment and management.
- Proven experience in in P&L management, budgeting, and forecasting.
- Exceptional leadership, communication, and stakeholder management skills.
- Bachelor’s degree in cybersecurity, information technology, or a related field; a master’s degree is preferred.
- Relevant certifications such as CISSP, CISM, or CISA are highly desirable.