ciso

HugoBank

<div>As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank&rsquo;s digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
DUTIES &amp; RESPONSIBILITIES:
Information Security Strategy &amp; Governance<ul><li>
Define and execute the bank&rsquo;s enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements.</li><li>
Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making.</li></ul>
Risk Management &amp; Compliance<ul><li>
Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities.</li><li>
Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions.</li></ul>
Security Operations<ul><li>
Oversee day-to-day security operations including incident response, threat detection, and vulnerability management.</li><li>
Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches.</li></ul>
Security Architecture &amp; Vendor Management<ul><li>
Define and govern the bank&rsquo;s security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments.</li><li>
Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services.</li></ul>
Security Awareness &amp; Culture<ul><li>
To promote a culture of security awareness through training and communication, embedding security responsibility across the organization.</li></ul>
Budget &amp; Resource Management<ul><li>
Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources.</li></ul>
Access Management &amp; Controls<ul><li>
Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls.</li><li>
Implement and maintain a trusted software list, regularly reviewing and updating controls.</li><li>
Evaluate employee software requests and ensure all tools meet internal security standards.
</li></ul>Security tools and the evolving ecosystem<ul><li>
Define and continuously evolve the bank&rsquo;s information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows.</li></ul>
ROLE RELATIONSHIP:
Internal<ul><li>
Executive Leadership</li><li>
IT and Operation Teams</li><li>
Compliance and Risk Management</li><li>
Internal Audit</li></ul>
External<ul><li>
Regulatory Authorities (SBP)</li><li>
Security Vendors and Consultants</li><li>
Third-Party Partners &amp; Auditors</li></ul> 

Requirements 
<ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Information Security, Cybersecurity, or related field.
</li></ul><ul><li>Industry certifications such as CISSP, CISM, or CISA are highly desirable.
</li><li>Minimum 15 years of experience in Information Security or related domains.</li><li>
Proven leadership experience in senior information security roles, preferably in the financial sector.</li><li>
In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks.</li><li>
Banking or FinTech experience prefered</li></ul></div>

Chief Information Security Officer (CISO)

<div>
 As the Chief Information Security Officer (CISO) for HugoBank, a cloud-native digital bank operating in Pakistan, one will play a pivotal leadership role in safeguarding the bank's digital ecosystem. The CISO is responsible for defining and executing the enterprise information security strategy, managing cyber and technology risks, and ensuring compliance with applicable regulatory and supervisory requirements. This role ensures the confidentiality, integrity, and availability of customer data, critical systems, and bank assets across cloud (AWS), on-premises, and third-party environments.
 
 
 
 DUTIES &amp; RESPONSIBILITIES:
 
 
 
 Information Security Strategy &amp; Governance
 
 
 <ul>
 <li>
 Define and execute the bank's enterprise information security strategy and governance framework, ensuring alignment with business objectives, cloud-native architecture, and regulatory requirements
 </li>
 <li>
 Provide oversight and reporting of information security risks, controls, and posture to senior management and the Board, embedding security into enterprise risk management and decision-making
 
 
 </li>
 </ul>
 Risk Management &amp; Compliance
 
 
 <ul>
 <li>
 Identify, assess, and prioritize security risks, implementing measures to mitigate vulnerabilities
 </li>
 <li>
 Ensure ongoing compliance with applicable regulatory, legal, and industry requirements, and act as the primary interface for information security matters with regulators, auditors, and internal risk and compliance functions
 
 
 </li>
 </ul>
 Security Operations
 
 
 <ul>
 <li>
 Oversee day-to-day security operations including incident response, threat detection, and vulnerability management
 </li>
 <li>
 Develop and maintain an incident response plan to ensure timely and effective handling of security incidents or breaches
 
 
 </li>
 </ul>
 Security Architecture &amp; Vendor Management
 
 
 <ul>
 <li>
 Define and govern the bank's security architecture, ensuring secure-by-design controls across cloud-native platforms, applications, infrastructure, and data environments
 </li>
 <li>
 Oversee third-party and vendor security risk management, including due diligence, onboarding, continuous monitoring, and contractual security obligations for critical and outsourced services
 
 
 </li>
 </ul>
 Security Awareness &amp; Culture
 
 
 <ul>
 <li>
 To promote a culture of security awareness through training and communication, embedding security responsibility across the organization
 
 
 </li>
 </ul>
 Budget &amp; Resource Management
 
 
 <ul>
 <li>
 Manage the cybersecurity budget, ensuring efficient allocation and utilization of resources
 
 
 </li>
 </ul>
 Access Management &amp; Controls
 
 
 <ul>
 <li>
 Define and enforce access management policies, including user-provisioning, de-provisioning and privileged access controls
 </li>
 <li>
 Implement and maintain a trusted software list, regularly reviewing and updating controls
 </li>
 <li>
 Evaluate employee software requests and ensure all tools meet internal security standards.
 
 
 </li>
 </ul>
 Security tools and the evolving ecosystem
 
 
 <ul>
 <li>
 Define and continuously evolve the bank's information security tooling and platforms (e.g., IAM, SIEM/SOC, EDR/XDR, PAM, DLP, cloud security, application security), ensuring effective coverage, integration, and scalability as the bank grows
 
 
 </li>
 </ul>
 
 ROLE RELATIONSHIP:
 
 
 
 
 Internal
 
 
 
 <ul>
 <li>
 Executive Leadership
 </li>
 <li>
 IT and Operation Teams
 </li>
 <li>
 Compliance and Risk Management
 </li>
 <li>
 Internal Audit
 
 
 </li>
 </ul>
 
 External
 
 
 
 <ul>
 <li>
 Regulatory Authorities (SBP)
 </li>
 <li>
 Security Vendors and Consultants
 </li>
 <li>
 Third-Party Partners &amp; Auditors
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 Bachelor's or Master's degree in Information Security, Cybersecurity, or related field.
 </li>
 <li>
 Industry certifications such as CISSP, CISM, or CISA are highly desirable.
 </li>
 <li>
 Minimum 15 years of experience in Information Security or related domains
 </li>
 <li>
 Proven leadership experience in senior information security roles, preferably in the financial sector
 </li>
 <li>
 In-depth knowledge of cybersecurity principles, technologies, and regulatory frameworks
 </li>
 <li>
 Banking or FinTech experience prefered
 </li>
 </ul>
</div>

LUNA PR

Chief Information Security Officer (CISO)Office Location: DubaiWork Arrangement: RemoteThis role is designed for a strategic leader who thrives at the intersection of modern engineering velocity and institutional grade risk management. Reporting directly to the C Suite [COO/CFO] with a dotted line to the Board of Directors, you will have the authority to build a defensible, automated security program that serves as a core business enabler.Key Responsibilities1. Regulatory Ownership and Executive Governance<ul><li>Designated Authority: Serve as the CISO responsible for the cybersecurity program in accordance with NYDFS Part 500 requirements, overseeing comprehensive annual risk assessments and managing the annual certification of compliance process.</li><li>SEC and Public Market Readiness: Lead the organizational process for determining the materiality of cybersecurity incidents and oversee the timely preparation of all required disclosures and filings in accordance with public market regulations and governance standards.</li><li>Board Stewardship: Provide quarterly Material Security Risk briefings to the Audit Committee, translating complex infrastructure threats into actionable business risk metrics.</li><li>Global Awareness (Preference): Maintain a preference for experience with global mandates (e.g., EU DORA, UK FCA, GDPR) to support international settlement expansion.</li></ul>2. AI Governance and Stablecoin Infrastructure<ul><li>Agentic AI Security: Establish the governance and security framework for autonomous AI agents, ensuring programmable money movement is resilient against prompt injection, model poisoning, and unauthorized agentic transactions.</li><li>Stablecoin Settlement Defense: Oversee the security of the end-to-end stablecoin lifecycle, ensuring the cryptographic integrity of minting/burning protocols and the security of reserve management interfaces.</li><li>Identity-First (Zero Trust): Architect a comprehensive security model that applies consistent rigor to both human and non-human identities, implementing modern phishing resistant authentication and zero trust principles across the enterprise.</li><li>Continuous Compliance: Transition from manual GRC to Continuous Controls Monitoring (CCM), where audit evidence is generated in real time through Policy as Code.</li></ul>3. Security Engineering and DevSecOps<ul><li>Seamless Security (Shift Left): Foster a culture where security is built in from the start. You will replace manual gatekeeping with automated guardrails integrated into the development process, allowing engineers to ship securely without losing speed.</li><li>Smart Risk Management: Move beyond long lists of vulnerabilities. You will implement a process that prioritizes fixes based on real world impact, ensuring engineering teams spend their time on the risks that threaten our environment.</li></ul>4. Operational Leadership and Resilience<ul><li>Incident Response and Tabletops: Own the global Incident Response and Business Continuity plans; lead high stakes tabletop exercises simulating systemic financial failures and AI driven fraud.</li><li>Third Party Risk (TPRM): Manage the security lifecycle of critical banking and ICT partners, moving beyond point in time assessments to continuous, data driven vendor monitoring.</li><li>Talent Development: Lead, develop, and motivate a team of subject matter experts in a distributed, remote-first environment.</li></ul>Qualifications and Experience<ul><li>The Standard: CISSP required, or a demonstrably equivalent executive credential (CISM, CCISO, or CISA).</li><li>Financial Pedigree: 12+ years in Information Security, with significant experience in a NYDFS regulated or SEC reporting environment.</li><li>Infrastructure Depth: Proven success in distributed, cloud driven (AWS/GCP) organizations. Experience with stablecoin protocols or AI driven financial tools is a strong advantage.</li><li>Preferred Education and Certifications: Master&rsquo;s degree (Cybersecurity, MIS, or MBA) and/or senior-level professional designations like GSLC or equivalent executive cybersecurity leadership training.</li></ul>Leadership and Soft Skills<ul><li>Strategic and Lateral Thinker: Ability to recognize the potential of regulatory frameworks as tools for continuous improvement.</li><li>Operational Resolve: Capable of leading the difficult conversations where business speed and regulatory safety conflict.</li><li>Agile Leadership: Proven ability to lead through ambiguity and rapid change. You are a decisive leader who can pivot strategies in real time based on shifting market conditions while maintaining team focus on high priority outcomes.</li><li>Collaborative Leader: A sophisticated approach to motivating subject matter experts in a remote-first, high-growth environment.</li></ul>Job Type: Full-time

Chief Information Security Officer

AMER Technology, Inc.

<div>
 
 
 Job Title: Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 
 
 
 Client:
 
 Texas Health and Human Services Commission (HHSC)
 
 
 
 Location:
 
 701 W 51st Street, Austin, TX 78751
 
 
 
 Work Mode:
 
 100% Onsite (Local Candidates Only)
 
 
 
 Position Overview
 
 
 
 The Texas Health and Human Services Commission (HHSC) is seeking an experienced
 
 Cybersecurity Risk &amp; Compliance Analyst &ndash; System Security &amp; Risk (GRC) Specialist
 
 to support enterprise cybersecurity governance, risk management, and compliance operations.
 
 
 This role is responsible for ensuring that HHSC information systems remain secure, compliant, and audit-ready by supporting:
 
 <ul>
 <li>
 System Security Plan (SSP) development
 </li>
 <li>
 Security Assessments (SA)
 </li>
 <li>
 Risk Assessments (RA)
 </li>
 <li>
 Authorization to Operate (ATO) support
 </li>
 <li>
 Continuous monitoring initiatives
 </li>
 </ul>
 
 The analyst will collaborate closely with:
 
 <ul>
 <li>
 Information Owners (IO)
 </li>
 <li>
 Information Custodians (IC)
 </li>
 <li>
 Technical &amp; Application Teams
 </li>
 <li>
 HHSC CISO Office
 </li>
 </ul>
 
 All activities must align with:
 
 <ul>
 <li>
 
 NIST SP 800-53
 
 </li>
 <li>
 
 NIST Risk Management Framework (RMF)
 
 </li>
 <li>
 
 DIR Security Control Standards
 
 </li>
 <li>
 HHSC cybersecurity policies
 </li>
 </ul>
 
 RSA Archer serves as the system of record for all GRC activities.
 
 
 
 Key Responsibilities
 
 
 
 
 System Security Planning (SSP)
 
 
 <ul>
 <li>
 Develop, maintain, and update System Security Plans for HHSC systems and applications.
 </li>
 <li>
 Gather and validate control implementation evidence.
 </li>
 <li>
 Ensure documentation aligns with NIST, DIR, and HHSC CISO standards.
 </li>
 <li>
 Support lifecycle updates of SSPs for compliance and audit readiness.
 </li>
 </ul>
 
 
</div>

Cybersecurity Risk & Compliance Analyst

noon

<div>
 
 
 About noon
 
 
 
 noon is the region's leading consumer commerce platform. Since its launch on December 12th, 2017, in Saudi Arabia and the UAE, and its expansion into Egypt in February 2019, noon has grown into a diverse ecosystem spanning marketplaces for food delivery, quick commerce, fintech, and fashion. noon is a work in progress - six years in, but only 5% done.
 
 
 
 
 
 
 noon&rsquo;s mission:
 
 Ring every doorbell, every day.
 
 
 
 
 
 
 Role Overview - Senior Security Program Manager
 
 
 
 
 
 
 Noon&rsquo;s Group Cybersecurity is hiring a Senior Security Program Manager to run the execution engine of security org across the noon group of companies. We need a senior program manager who can turn a complex security roadmap into predictable delivery.
 
 
 
 
 
 The role spans keeping the security portfolio moving with clean artifacts and executive-grade reporting. It is designed to be more hands-on and cross-cutting than a traditional PMO function, while also being broader in scope than a TPM role focused on delivering within a single engineering team or system.
 
 
 
 
 
 You will PM the security roadmap across Platform Security, Application and Product Security, GRC, and engineering partners. You will own the planning system, the delivery rhythm, the reporting model, and the closure standards for security initiatives.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 <ul>
 <li>
 Own the cybersecurity portfolio execution model including planning, governance rhythm, risk, reporting, and closure standards
 </li>
 <li>
 Drive quarterly planning for the security roadmap including sequencing, resourcing assumptions, and critical path
 </li>
 <li>
 Translate CISO projects and priorities, regulatory commitments, and audit requirements into executable program plans with owners, milestones, dependencies, and measurable outcomes
 </li>
 <li>
 Run weekly execution reviews with security leadership, enforce action closure, and manage decision deadlines
 </li>
 <li>
 Build and maintain the Group Security Scorecard across entities and functions, defining the metric set, targets, owners, and data sources and including it in the monthly reviews.
 </li>
 <li>
 Maintain the cybersecurity portfolio system of record covering initiative status, milestones, risks, dependencies, and decisions
 </li>
 <li>
 Produce executive-ready reporting packs with consistent format across progress, risks, decisions required, and next milestones
 </li>
 <li>
 Write one-pager program briefs for major initiatives covering scope, success metrics, owners, milestones, acceptance criteria, and timelines
 </li>
 <li>
 Track hiring and onboarding critical path for roadmap delivery milestones, without owning recruiting execution
 </li>
 <li>
 Improve execution visibility through automation, tooling, and dashboards that keep portfolio health current with minimal overhead on teams
 </li>
 </ul>
 
 
 
 
 
 Who we need?
 
 
 
 
 
 <ul>
 <li>
 Senior PM experience running cross-functional portfolios across multiple teams with tight delivery expectations
 </li>
 <li>
 Strong ability to drive accountability through clarity, structured pressure, and escalation, without relying on formal authority
 </li>
 <li>
 Strong ability to build a delivery system including cadence, artifacts, templates, dashboards, and consistent reporting
 </li>
 <li>
 Executive-grade writing and communication with concise updates, clear risk framing, and clean decision asks
 </li>
 <li>
 Strong judgment on prioritization, sequencing, and tradeoffs under competing demands and constrained capacity
 </li>
 <li>
 Ability to convert ambiguity into scope, milestones, owners, and measurable outputs
 </li>
 <li>
 Strong program management fundamentals with a bias toward execution, not ceremony
 </li>
 <li>
 Security fluency across variety of security domains, enough to pressure-test plans and timelines without being the technical decision maker.
 </li>
 <li>
 High ownership and maturity handling sensitive information while representing the security leaders and CISO.
 </li>
 </ul>
 
 
 
 
 
 Preferred experience
 
 
 
 
 
 <ul>
 <li>
 Experience in a CISO office, security leadership office, or security program portfolio in a large tech company
 </li>
 <li>
 Experience delivering security transformation programs across multiple geographies and business units.
 </li>
 <li>
 Experience PM&rsquo;ing security roadmaps that include detection and response maturity, platform security modernization, secure engineering programs, and governance remediation.
 </li>
 <li>
 Experience building governance rhythms and reporting packs used by executives, audit committees, or senior leadership stakeholders
 </li>
 <li>
 Experience in high-scale consumer internet, e-commerce, fintech, payments, logistics, or marketplace environments
 </li>
 <li>
 Strong program management tooling depth (or equivalent) and dashboarding habits that leadership can actually consume.
 </li>
 </ul>
 
 
 
 
 Is this you?
 
</div>

Senior Security Program Manager

Tensley Consulting, Inc.

Job Description
 
We are seeking an ISSO 1 to join our team. In this role, you will:
 
1rem; padding: 0pxcolor: rgb Education/Experience: 
1rem; padding: 0pxcolor: rgb
 ,
 About Tensley Consulting, Inc.
 
rgb About Tensley
 rgbTensley Consulting is a Service-Disabled Veteran-Owned Small Business focused on mission engineering in support of the United States Intelligence Community and the Department of Defense. Our team consists of System Engineers, Software Engineers, Test Engineers, and Signals Analysts performing work throughout the Continental United States (CONUS) and Outside the Continental United States (OCONUS).
 rgb
 
rgb Equal Opportunity, Diversity & Inclusion
 rgbWe aim to build a team that represents a variety of backgrounds, perspectives, and skills. We embrace inclusion and ensure equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, military or veteran status, or any other personal characteristic .
 
rgb Benefits Include
 100% paid medical coverage with HSA and company contribution
 100% paid vision, dental, short-term, and long-term premium
 12% 401(k) contribution (not a match)
 Education and training budget
 6 weeks and 3 days of PTO
 And much more!
 
rgb Come grow with us!

ISSO 1

Ace Tech Middle East LLC

&middot; Cybersecurity risk assessment and evaluation&middot; Preparation and support for ISO 27001 certification&middot; Support audits and assessments (ISO 27001, NIST, SOX)&middot; Policy, procedure, and risk register maintenance&middot; Business Continuity Management (BCM) support&middot; Day-to-day support to CISO (reports, presentations, data collection)&middot; Stakeholder guidance on cybersecurity-related topics&middot; Participation and management of cybersecurity forums&middot; Phishing simulations and awareness campaigns&middot; Cybersecurity awareness communications and emails&middot; Executive-level and staff cybersecurity presentations&middot; Stakeholder and executive meetings and reporting&middot; Support and coordination for in-house developed applications (knowledge transfer provided)&middot; Coordination with internal teams and third parties&middot; Network security (firewalls, IDS/IPS, VPN)&middot; Endpoint protection and EDR solutions&middot; SIEM platforms (Splunk, Sentinel, QRadar, ELK)&middot; Cloud security controls and configurations&middot; Vulnerability management tools (Nessus, Qualys)&middot; Secure configuration and hardening standards&middot; Risk management and risk evaluation&middot; Audit support and auditor engagementJob Type: Full-timeJob Type: Full-timePay: AED10,000.00 - AED12,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Language:<ul><li>English (Required)</li></ul>License/Certification:<ul><li>CISSP Certification (Required)</li></ul>

CISSP Certified Engineers Required

Search 45+ Ciso jobs near you this March. New roles added regularly across leading industries. Apply today.

45 ciso jobs Near Me

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Chief Information Security Officer

Cybersecurity Risk & Compliance Analyst

Senior Security Program Manager

ISSO 1

CISSP Certified Engineers Required