information security officer

Sciens Building Solutions

<div><p><b>CHIEF INFORMATION SECURITY OFFICER</b></p><p><b><br>
THE POSITION IN A NUTSHELL</b>
</p><p>Sciens is seeking a Chief Information Security Officer (CISO), who will be responsible for establishing and operating a right-sized, risk-based cybersecurity program that protects the company, supports growth initiatives, and aligns with value-creation objectives. This role balances hands-on execution with strategic oversight, ensuring security enables business performance and mergers &amp; acquisitions (M&amp;A) activity.</p><p></p><p>
The key objectives of the role will be to:</p><p></p><ul><li>
Reduce cyber risk that could impact valuation</li><li>
Establish repeatable, scalable security controls across the company</li><li>
Support due diligence, integrations, and audits</li><li>
Build a roadmap that will improve cyber maturity without enterprise-level cost or complexity</li><li>
Provide clear, board-level visibility into risk posture</li></ul><ul><li>
Deliver measurable reduction in critical vulnerabilities and incident risk</li><li>
Perform successful audits and customer security assessments</li><li>
Improve/reduce cyber insurance terms and premiums</li></ul><p></p><p><b>
WHAT YOU&rsquo;LL BE DOING (and doing well!)</b></p><p></p><p><b>
1. Security Strategy &amp; Governance</b></p><ul><li>
Develop and maintain a pragmatic cybersecurity strategy and roadmap aligned to business objectives</li><li>
Define security policies, standards, and procedures appropriate for a fast growing SMB environment</li><li>
Establish cybersecurity governance, risk appetite, and reporting mechanisms</li><li>
Present cyber risk updates to executive leadership and private equity (PE) stakeholders in plain business terms</li></ul><p><b>
2. Risk Management &amp; Compliance</b></p><ul><li>
Identify, assess, and prioritize cyber risks using a risk-based approach</li><li>
Oversee vulnerability management, penetration testing, and remediation efforts</li><li>
Lead compliance initiatives, such as SOC 2, ISO 27001, NIST, CMMC, HIPAA, PCI-DSS</li><li>
Ensure third-party and vendor risk management processes are in place</li></ul><p><b>
3. Incident Response &amp; Resilience</b></p><ul><li>
Own the incident response plan, tabletop exercises, and breach readiness</li><li>
Lead response to security incidents, ransomware events, or data breaches</li><li>
Coordinate with legal, insurance, forensics, and external advisors as needed</li><li>
Oversee backup, disaster recovery, and business continuity planning</li></ul><p><b>
4. Technology &amp; Operations
</b></p><ul><li>Oversee core security tooling (IAM, endpoint security, SIEM/MDR, email security, cloud security)</li><li>
Ensure secure configuration of cloud, SaaS, and on-prem environments</li><li>
Partner closely with IT and operations teams to embed security into operations</li><li>
Make cost-effective build vs. buy decisions</li></ul><p><b>
5. M&amp;A Support</b></p><ul><li>
Support cybersecurity due diligence for acquisitions</li><li>
Assess security posture of acquisition targets and provide risk summaries</li><li>
Lead or advise on post-acquisition security integration and remediation</li><li>
Align security maturity with PE exit strategy (strategic buyer or IPO readiness)</li></ul><p><b>
6. Culture &amp; Awareness</b></p><ul><li>
Build a security-aware culture through training and phishing simulations</li><li>
Act as a business-friendly security advisor</li><li>
Educate leadership on cyber risk, insurance implications, and regulatory exposure</li></ul><p><b>
WHAT WE LIKE ABOUT YOU</b></p><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Technology, or a related field (or equivalent work experience).</li><li>
10+ years in information security, IT risk, or cybersecurity leadership</li><li>
Experience in SMB, PE-backed, or high-growth environments</li><li>
Strong working knowledge of:<ul><li>
Cloud security (AWS, Azure, GCP, SaaS)</li><li>
Identity &amp; access management</li><li>
Endpoint and network security</li><li>
Incident response and ransomware defense</li><li>
Proven ability to communicate cyber risk to non-technical executives and investors</li></ul></li><li>
Experience with at least one recognized security framework (NIST, ISO, CIS)</li></ul><ul><li>
Excellent problem-solving and analytical skills.</li><li>
Strong communication and interpersonal abilities.</li><li>
Ability to manage multiple projects and meet deadlines in a fast-paced environment.</li></ul><p><b>
PREFERRED QUALIFICATIONS
</b></p><ul><li>Prior experience supporting private equity portfolios or M&amp;A</li><li>
Experience standing up a security program from scratch</li><li>
CISSP, CISM, or equivalent certification</li></ul><p><b>
WHAT WE&rsquo;RE BRINGING TO THE TABLE</b></p><ul><li>
Competitive salary based on qualifications.</li><li>
Paid time off plan and holidays.</li><li>
401(k) matching.</li><li>
Short term and long-term disability.</li><li>
Medical, dental, and vision plans with options.</li><li>
Life insurance.</li><li>
Company laptop.</li><li>
Professional career development opportunities.</li><li>
Tuition reimbursement program.</li></ul></div><p></p>

Chief Information Security Officer

Habib Bank AG Zurich

<div>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  Maintain a thorough understanding of the bank's environment and ensure compliance with information security policies, directives, and regulatory requirements internally and externally. Stay updated on evolving best practices in cyber security risk management.
 </p>
 <p>
  &middot; Possess a comprehensive understanding and practical proficiency in the Secure Software Development Life Cycle.
 </p>
 <p>
  &middot; Evaluate the security architecture and design of business applications and related databases.
 </p>
 <p>
  &middot; Conduct timely risk assessments of applications to identify information security vulnerabilities prior to their deployment.
 </p>
 <p>
  &middot; Develop and oversee the application security program, providing recommendations for secure application architecture.
 </p>
 <p>
  &middot; Supervise and conduct due diligence and security baselining for newly introduced applications.
 </p>
 <p>
  &middot; Perform assessments of application security controls, vulnerability testing, and penetration testing.
 </p>
 <p>
  &middot; Ensure effective coordination, planning, and response to internal and external audits, as well as regulatory requirements, resolving audit findings promptly.
 </p>
 <p>
  &middot; Possess practical experience in conducting web and mobile application penetration testing according to OWASP top 10 and CWE/SANS top 25 standards, using Black-Box, Grey-Box, and White-Box methodologies.
 </p>
 <p>
  &middot; Conduct security assessments, code reviews, vulnerability scans, and penetration tests to identify vulnerabilities, weaknesses, and risks in web applications, APIs, and software components.
 </p>
 <p>
  &middot; Collaborate with development teams to address identified vulnerabilities, implement secure coding practices, and establish guidelines to safeguard application confidentiality, integrity, and availability.
 </p>
 <p>
  &middot; Stay updated on security trends, technologies, and best practices, integrating security controls into the software development lifecycle.
 </p>
 <p>
  &middot; Undertake assigned ad-hoc projects from the line manager.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Requirements:
  </strong>
 </p>
 <p>
  &middot; Possess a minimum of two to three years of experience in application security.
 </p>
 <p>
  &middot; Bachelor&rsquo;s degree in Computer Science/IT/B.Tech/B. E or related fields
 </p>
 <p>
  &middot; Sound knowledge of ISO 27001, PCI DSS, SWIFT CSF, NIST or related standards and frameworks.
 </p>
 <p>
  &middot; Professional certifications such as CASE/ CASS/ CSSLP/ CEH etc. will be preferred.
 </p>
 <p>
  &middot; Demonstrate an understanding of information security and risk management concepts.
 </p>
 <p>
  &middot; Must have experience in Kubernetes (GKE, KUBECTL, HELM) and containers (Docker)
 </p>
 <p>
  &middot; Appreciate the value of diversity in the workplace and actively contribute to fostering an inclusive culture that enables individuals to realize their full potential and bring their authentic selves to work.
 </p>
 <p>
  &middot; Work independently, prioritize multiple tasks, and adapt to changes as required.
 </p>
 <p>
  &middot; Maintain composure and perform well in high-pressure and challenging situations.
 </p>
</div>


Information Security Officer

Gainwell Technologies LLC

<div><p>Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You&rsquo;ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You&rsquo;ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.</p><p></p><div><div><div><h2 class="jobSectionHeader"><b><br>
Summary</b></h2></div><div><div><div><p>
As the Senior Information Security Officer (ISO), you will be accountable for all security-related compliance and delivery for the customer(s) assigned. In a typical engagement, you operate as a trusted advisor and security partner in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The Senior ISL helps interpret and explain operational issues and plans next steps from an information security viewpoint. This requires the ability to interact and influence at an executive management level within client organizations such as C-level IT leadership and IT Security leads. You will be able to demonstrate industry expertise and your working knowledge of security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework are the standard security frameworks that the Senior ISL will be reviewing, maintaining, and helping to assess on each designated account or health care product within Gainwell Technologies and its partners.</p></div></div><div><div><br>
</div></div></div></div><div><div><h2 class="jobSectionHeader"><b>
Your role in our mission</b></h2></div><div><ul><li>
Compliance, operationally focused and security driven</li><li>
Lead Security operational governance activities</li><li>
Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).</li><li>
Relationship management with Gainwell Technologies suppliers and the client.</li><li>
Create and maintain an account security plan for the selected account(s) and Products</li><li>
Manage and report security incidents from start to finish</li><li>
Manage audit preparation, facilitation and remediation</li><li>
Manage security risks and exceptions</li><li>
Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)</li><li>
Escalate and resolve security issues</li><li>
Coordinate delivery of security metrics and reporting in support of contractual commitment</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What we're looking for</b></h2></div><div><ul><li>
At least 5 years&rsquo; experience working in a risk management, audit, security, or technical delivery role</li><li>
Bachelor or Master&rsquo;s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)</li><li>
Experience with and understanding of the security and auditing regulations</li><li>
Experience with audit and compliance programs, including leading audits and remediation efforts</li><li>
Experience with HIPAA, NIST, and FedRAMP</li><li>
Excellent and effective communication skills</li><li>
Ability to work effectively in diverse, multi-national and virtual environments</li><li>
Self-motivated and tenacious</li><li>
Demonstrate sound judgment and integrity</li><li>
Ability to influence delivery personnel in the execution of security and compliance requirements</li><li>
Experience as a Security consultant, architect and/or engineer</li><li>
Experience in working with security management including information governance and compliance</li><li>
Deep understanding and working knowledge of information security industry best practices with hands on experience</li><li>
Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001</li><li>
Knowledge of security audit and accreditation processes</li><li>
Ability to adapt to new security regimes.</li><li>
CISSP certification, CISM/CISA or CRISC a plus</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What you should expect in this role</b></h2></div><div><ul><li>
Remote position (US only)</li><li>
Opportunities to travel through your work (0-10%)</li><li>
Video cameras must be used during all interviews, as well as during the initial week of orientation</li><li>
The deadline to submit applications for this posting is 3/30/2026</li></ul></div></div></div><p></p><p><br>
The pay range for this position is $85,000.00 - $121,400.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You&rsquo;ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.</p><p></p><p><br>
We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You&rsquo;ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.</p><p></p><p><i><br>
Gainwell Technologies </i><i>is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. </i><i>Gainwell Technologies defines &ldquo;wages&rdquo; and &ldquo;wage rates&rdquo; to include &ldquo;all forms of pay, including, but not limited to, salary, overtime pay, bonuses, stock, stock options, profit sharing and bonus plans, life insurance, vacation and holiday pay, cleaning or gasoline allowances, hotel accommodations, reimbursement for travel expenses, and benefits.</i></p></div>

Information Security Officer (ISO)

Versatech, Inc.

<div><div>VersaTech is an ISO-certified provider of innovative technology solutions to the public sector, providing services that include Digital Transformation, IT Infrastructure Support, Cyber Security, Agile Software Development, Audio Visual Solutions, and Healthcare Consulting. Our long record of customer satisfaction and commitment to excellence provides assurance to our clients that we have the talent, management, and innovation necessary to solve their problems and exceed expectations.</div>
<div></div><div>VersaTech is currently looking for an <b>Information Security Officer (ISSO)</b> to ensure that security requirements for major applications or general support system are being or will be met. Must have experience working in a federal environment. This position is remote. The successful candidate will ensure that requests for security authorization of computer systems are completed in accordance with the published procedures and communicate with multiple levels of IT and business staff. This position is remote.</div>
<div></div><div><b>Salary:</b> $100,000 - $130,000 depending on experience. Discretionary annual bonus based on performance.</div>
<div></div><div><b>ISSO Essential Duties</b></div>
<ul><li>Maintain an inventory of hardware and software</li>
<li>Coordinate the development of a Contingency Plan and ensure that the plan is tested and maintained</li>
<li>Demonstrated experience writing information system security documentation.</li>
<li>Knowledge and experience with information security standards, policies and practices - NIST (800-53 rev4), FISMA</li>
</ul><div><b>Privacy Analyst Essential Duties</b></div>
<ul><li>Advanced knowledge of Privacy Threshold assessments, Privacy Impact Assessments, and Privacy Continuous Monitoring Assessments.</li>
<li>Advanced knowledge of CSAM management</li>
<li>Advanced knowledge of Disaster Recovery (FCD-1), ISCP development and exercises</li>
<li>Strong knowledge of 800-53 rev 4 &amp; rev 5</li>
<li>Strong knowledge of ISSO duties (SSPs, POAM management, vulnerability management)</li>
</ul><div><b>Requirements:</b></div>
<ul><li>5 years of experience in Information Security, with a preference for a B.S. in IT or Information Security (or 2 additional years of relevant experience in lieu of a degree).</li>
<li>Knowledge of information security engineering, design concepts and principles.</li>
<li>Recent experience working with a federal customer.</li>
<li>Knowledgeable with the Systems Development Lifecycle (SDLC) and continuous monitoring methodologies.</li>
<li>Extensive experience analyzing information technology and system risk in complex environments and articulating results (verbal/reports) to all levels of management.</li>
<li>Must be a team player with &quot;can do&quot; attitude. Must be able to work independently with initiative and innovation.</li>
<li>Knowledge of vulnerability assessment tools (NESSUS, etc.) and analyzing the reports generated from these assessments.</li>
<li>Must have excellent written communication skills as the candidate's job will include written interaction with senior- level executives.</li>
<li>Ability to use MS Office, Ability to use PC, Analytical and Critical Thinking Skills, Interpersonal and People Skills, Listening Skills, Multi-Tasking Ability.</li>
<li>Bachelor&rsquo;s degree in cyber security or related field</li>
</ul>
<div></div><div><b>Preferred Qualifications:</b></div>
<ul><li>Industry certifications, such as CISSP, CAP, Security+ certifications are preferred.</li>
<li>Exceptional interpersonal and verbal communication skills, with the ability to collaborate well across teams and organizations.</li>
<li>Proven ability to multi-task and deliver on-time with the highest quality.</li>
</ul>
<div></div><div><b>Clearance:</b> Ability to obtain and maintain a Public Trust Clearance</div>
<div></div><div>Find out who we are: https://www.versatechinc.com/</div>
<div></div><div>VersaTech offers an excellent benefits package that includes medical, dental, and vision benefits, 401k employer-matching retirement contributions after 90 days, generous paid time off (3 weeks PTO plus 11 holidays), and ample growth opportunities.</div>
<div></div><div>VersaTech, Inc. is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decision without regard to race,</div>
<div>color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.</div></div>

Information Security Officer (ISSO)

Genesee County MI

<div>
 <strong>
  Salary: $56.7288 Hourly ($117,996)
  <br/>
  <br/>
 </strong>
 <strong>
  Minimum Qualifications
  <br/>
  <br/>
 </strong>
 Ten (10) years' progressive professional IT experience
 <strong>
  -AND-
 </strong>
 five (5) years' professional experience in cybersecurity, including leadership responsibilities
 <strong>
  -AND-
 </strong>
 five (5) years' experience in enterprise risk management, security auditing and compliance oversight
 <strong>
  -AND-
 </strong>
 five (5) years' experience supervising or managing IT and/or cybersecurity staff.
 <br/>
 <br/>
 Equivalent combinations of education and experience may be considered.
 <br/>
 <br/>
 <strong>
  Desired Certifications
  <br/>
  <br/>
 </strong>
 Experience in public sector or governmental environments preferred.
 <br/>
 <br/>
 Certified Information Systems Security Professional (CISSP)
 <br/>
 <br/>
 Certified Information Security Manager (CISM)
 <br/>
 <br/>
 Certified Information Systems Auditor (CISA)
 <br/>
 <br/>
 Certified in Risk and Information Systems Control (CRISC)
 <br/>
 <br/>
 GIAC certifications
 <br/>
 <br/>
 Other relevant advanced cybersecurity certifications
 <br/>
 <br/>
 <strong>
  Special Requirements
  <br/>
  <br/>
 </strong>
 Must be willing to work irregular hours, nights and weekends in response to cybersecurity incidents.
 <br/>
 <br/>
 Must obtain and maintain certifications as determined by the CIO.
 <br/>
 <br/>
 Will be required to pass background and security clearance checks.
 <br/>
 <br/>
 <strong>
  Physical Requirements
  <br/>
  <br/>
 </strong>
 Must be able to perform Essential Job Duties and Functions with or without reasonable accommodations.
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The Chief Information Security Officer (CISO) is responsible for establishing, leading and continuously improving Genesee County's enterprise information security and risk management program. This executive leadership role provides strategic direction and governance for cybersecurity, data protection, regulatory compliance, business continuity and technology risk management across all County departments and offices.
 <br/>
 <br/>
 The CISO develops and implements a comprehensive, county-wide security strategy aligned with business objectives, legal requirements and industry best practices. The position is appointed by and reports to the Chief Information Officer and works closely with County leadership, elected officials, department heads and external partners.
 <br/>
 <br/>
 <strong>
  Essential Job Duties And Functions
  <br/>
  <br/>
 </strong>
 <strong>
  Strategic Leadership &amp; Governance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Develops and executes a comprehensive enterprise cybersecurity strategy and roadmap.
  </li>
  <li>
   Establishes a county-wide information security governance framework.
  </li>
  <li>
   Advises the CIO, County leadership and elected officials on cybersecurity risks, threats and mitigation strategies.
  </li>
  <li>
   Provides executive-level reporting on risk posture, security incidents, compliance status and emerging threats.
  </li>
  <li>
   Leads the development of long-term cybersecurity investment and budget planning.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Management &amp; Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Establishes and maintains a formal enterprise risk management framework for cybersecurity.
  </li>
  <li>
   Oversees security audits, risk assessments and vulnerability management programs.
  </li>
  <li>
   Ensures compliance with applicable federal, state and local regulations and standards.
  </li>
  <li>
   Develops, maintains and enforces information security policies, standards and procedures.
  </li>
  <li>
   Coordinates third-party risk management and vendor security reviews.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Security Architecture &amp; Operations
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provides executive oversight of county IT architecture, infrastructure security and data protection strategies.
  </li>
  <li>
   Ensures security measures are integrated into system design, development, procurement and implementation processes.
  </li>
  <li>
   Oversees implementation and management of security technologies including firewalls, VPNs, endpoint protection, identity and access management and data loss prevention.
  </li>
  <li>
   Ensures appropriate security controls are embedded in new systems, networks and data center initiatives.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Incident Response &amp; Resilience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Leads the County's cybersecurity incident response program.
  </li>
  <li>
   Directs response efforts for security breaches, threats and cyber incidents.
  </li>
  <li>
   Oversees development and testing of disaster recovery and business continuity plans.
  </li>
  <li>
   Coordinates with law enforcement, regulatory bodies, insurance carriers and external cybersecurity partners as needed.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Program &amp; Operational Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensures the internal IT security framework operates effectively while supporting business needs across departments.
  </li>
  <li>
   Evaluates new initiatives and projects for security architecture alignment and risk mitigation.
  </li>
  <li>
   Leads security-related change management and stakeholder education initiatives.
  </li>
  <li>
   Establishes cybersecurity awareness and training programs for all County employees.
  </li>
  <li>
   Develops and tracks key performance indicators (KPIs) and key risk indicators (KRIs) for cybersecurity performance.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Leadership &amp; Supervision
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Builds and leads a high-performing cybersecurity team.
  </li>
  <li>
   Fosters a culture of security awareness and accountability across the organization.
  </li>
  <li>
   Works collaboratively with department leadership to balance security, usability and operational efficiency.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Please See The Attached Job Description For More Details.
  <br/>
  <br/>
 </strong>
 <strong>
  <em>
   Job Posted by ApplicantPro
  </em>
 </strong>
</div>


CHIEF INFORMATION SECURITY OFFICER (IT)

Ethics HR

<p><b>Job Responsibilities:</b></p><ul><li>Define and execute the bank&rsquo;s enterprise information security strategy in alignment with the business and regulatory requirements.</li><li>Establish security governance frameworks, policies, and standards across all technology and business functions.</li><li>Oversee cybersecurity programs including threat detection, incident response, vulnerability management, and security operations.</li><li>Lead enterprise-wide technology risk management, ensuring effective identification, assessment, and mitigation of risks.</li><li>Ensure full compliance with Central Bank of Egypt cybersecurity mandates, digital banking requirements, and data protection regulations.</li><li>Develop and manage the Cloud Security Architecture (e.g., AWS, Azure) strategy, ensuring secure configuration and compliance for all digital infrastructure.</li><li>Establish Security Metrics and Key Risk Indicators (KRIs) for regular reporting to the Board and Executive Committee, demonstrating the effectiveness of the security program.</li><li>Implement and govern API Security standards and best practices to protect data exchange within the digital ecosystem and external partners.</li><li>Formally manage and sign off on outsourcing security agreements (third-party risk) to meet specific CBE requirements for external service providers</li><li>Coordinate internal and external audits, penetration tests, and security assessments.</li><li>Guide secure design and implementation of digital platforms, applications, and infrastructure.</li><li>Implement strong access controls, encryption standards, and secure development practices across all systems.</li><li>Oversee incident response planning, threat escalation procedures, and crisis management protocols.</li><li>Support development of business continuity and disaster recovery capabilities.</li><li>Manage cybersecurity risks associated with vendors, partners, outsourcing arrangements, and cloud-based services.</li><li>Ensure third-party systems meet the bank&rsquo;s security and resilience standards.</li><li>Promote strong security culture through awareness initiatives, training programs, and senior leadership engagement.</li><li>Ensure employees understand their responsibilities in maintaining cybersecurity.</li><li>Lead security teams across cyber operations, security engineering, GRC, an identity management.</li><li>Advice the CEO, CTOO/CIO, CRO, and Board committees on security posture, emerging threats, and risk mitigation actions.</li></ul><p><b>Job Requirements:</b></p><ul><li>Bachelor&rsquo;s/Master&rsquo;s degree in Information Security, Computer Science, Engineering, or related field from a reputable university.</li><li>12-15+ years of progressive experience in information security, cybersecurity, or technology risk roles, preferably in banking or financial services.</li><li>Strong knowledge of Central Bank of Egypt cybersecurity frameworks, digital banking guidelines, and financial-sector regulations.</li><li>Deep understanding of security technology, network security, IAM, application security, and SOC operations.</li><li>Experience overseeing incident response, security architecture, and enterprise-wide risk management.</li><li>Professional certifications preferred (CISSP, CISM, CRISC, CCSP or equivalent).</li><li>Strong knowledge of international standards like ISO 27001/27002 and global best practices for financial data protection.</li><li>Strong leadership, communication, and stakeholder management skills with the ability to influence senior executives and steer enterprise-level decisions.</li></ul><p>Job Type: Full-time</p>

County of Berks, PA

<div>
 <strong>
  Position Summary
  <br/>
  <br/>
 </strong>
 The Chief Information Security Officer of the County of Berks is responsible for collaborating with the county CIO and other county leadership in overseeing and managing the cybersecurity strategy, operations, and compliance efforts for the organization. This position plays a critical role in protecting the confidentiality, integrity, and availability of the organization's information assets and systems while ensuring compliance with relevant policies, laws, and regulations. The CISO and his/her staff will develop and execute a comprehensive cybersecurity strategy aligned with the organization's goals and objectives. This position will serve as one of the primary advisors to organizational leadership on cybersecurity matters, providing guidance and recommendations to mitigate risks and address emerging threats. The CISO and his/her staff will strive to ensure adherence to regulatory requirements such as the Criminal Justice Information Services (CJIS) Security Policy, HIPAA, and other applicable federal, state, and local laws.
 <br/>
 <br/>
 The CISO will collaborate with leadership to develop, implement, and update cybersecurity policies and procedures. This position will play a key role in developing and maintaining the organization's Cybersecurity Incident Response Plan, ensuring preparedness to address and recover from security incidents. The CISO will work with stakeholders to create and regularly update the organization's Continuity of Operations Plan (COOP), ensuring resilience and continuity during disruptions. This position will be responsible to collaborate with the rest of the I.S. department and operational teams to integrate security measures into system design, procurement, and implementation processes. The CISO will evaluate and recommend security technologies, tools, and services to enhance the organization's cybersecurity posture. The CISO and his/her staff will be responsible for overseeing the deployment, management, and monitoring of security infrastructure, including firewalls, IDS/IPS, EDR solutions, and many other security and technology solutions.
 <br/>
 <br/>
 <strong>
  Position Responsibilities
  <br/>
  <br/>
 </strong>
 ***Essential Functions***
 <br/>
 <br/>
 The duties and responsibilities of this position include, but are not necessarily limited to:
 <br/>
 <br/>
 <ul>
  <li>
   Accountable for the overall performance and efficacy of security projects and programs
  </li>
  <li>
   Analyzing security risks.
  </li>
  <li>
   Managing compliance efforts for HIPAA, CJIS, PCI, and other sensitive data sets.
  </li>
  <li>
   Recommending and implementing security safeguards.
  </li>
  <li>
   Monitoring compliance with security laws and regulations.
  </li>
  <li>
   Investigating information security and compliance incidents.
  </li>
  <li>
   Manage security reporting &amp; executive reporting.
  </li>
  <li>
   Oversee end-user security awareness program.
  </li>
  <li>
   Manage regular security and compliance tasks.
  </li>
  <li>
   Serve as project manager for designated security projects.
  </li>
  <li>
   Review security and compliance of equipment configurations.
  </li>
  <li>
   Maintain security and compliance documentation.
  </li>
  <li>
   Oversee and manage vulnerability management.
  </li>
  <li>
   Evaluate purchasing decisions and install new equipment.
  </li>
  <li>
   Support the organization's business continuity and disaster recovery planning and response.
  </li>
  <li>
   Schedules and conducts tabletop exercises and simulations.
  </li>
  <li>
   Works with CIO and IT leadership team on risk management and risk reporting.
  </li>
  <li>
   Design and manage the implementation of governance efforts.
  </li>
  <li>
   Create and review policies and procedures to align with established standards.
  </li>
  <li>
   Manage security audits and assessments and resulting findings.
  </li>
  <li>
   Manages and oversees the County's HIPAA security effort
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Minimum Education And Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Computer Science, Information Technology, or other related field of study
  </li>
  <li>
   Five years of firewall administration experience.
  </li>
  <li>
   Five years of experience in information systems architecture and design
  </li>
  <li>
   Five years of experience in incident management/incident response
  </li>
  <li>
   Eight years of experience in network administration or cybersecurity
  </li>
  <li>
   IT Security Certifications required: Certified Information Security Professional (CISSP), Certified Information Security Manager (CISM), or other approved certification.
  </li>
  <li>
   Valid state-issued driver's license required for local travel to County sites.
  </li>
  <li>
   Any equivalent combination of experience and training that provides the required knowledge, skills, and abilities.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Minimum Knowledge, Skills, And Abilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Expert knowledge of OSI Model's Layer 2 through Layer 7 network traffic
  </li>
  <li>
   Expert knowledge in current cybersecurity best practices and trends
  </li>
  <li>
   Ability to work with the coach technical team members to ensure that all solutions are secure.
  </li>
  <li>
   Ability to work with external vendors and contractors to evaluate new products and maintain existing products.
  </li>
  <li>
   Strong attention to detail and ability to solve problems effectively.
  </li>
  <li>
   Expert knowledge of firewall and security configuration
  </li>
  <li>
   Expert knowledge of routing and switching infrastructure, configuration, and protocols
  </li>
  <li>
   Knowledge of Microsoft server configurations and active directory
  </li>
  <li>
   Expertise in project management
  </li>
  <li>
   Knowledge of enterprise technology topology, including data center best practices, network design, and SAN implementation.
  </li>
  <li>
   Ability to work with information security staff and policies to ensure that all solutions are inherently secure.
  </li>
  <li>
   Knowledge of IT best practices and service offerings.
  </li>
  <li>
   Ability to work with vendors and contractors regarding new product evaluation and maintenance of existing products.
  </li>
  <li>
   Ability to keep accurate records and documentation.
  </li>
  <li>
   Ability to analyze complex problems and envision resolutions.
  </li>
  <li>
   Ability to communicate effectively both orally and in writing.
  </li>
  <li>
   Ability to thrive in a stressful, fast-paced team environment.
  </li>
  <li>
   Ability to handle stress.
  </li>
  <li>
   Physical presence in the office is required.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Physical Demands
  <br/>
  <br/>
 </strong>
 Work involves standing, walking, sitting, lifting, carrying, talking, hearing, using hands to handle, feel objects, tools, or controls, and reaching with hands and arms. Vision abilities required by this job include close vision and the ability to adjust focus. The employee must occasionally lift and/or move up to 50 pounds a distance of 15 feet or less.
 <br/>
 <br/>
 <strong>
  Working Environment
  <br/>
  <br/>
 </strong>
 Normal office environment
 <br/>
 <br/>
 *This position description serves as a guideline for communicating the essential functions and other information about the position to the applicant/employee. It is not intended to create a binding employment contract nor cover every detail of the position, and may be changed where appropriate.*
</div>


Chief Information Security Officer (Information Systems Department)

Search 10000+ Information security officer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 information security officer jobs Near Me

Chief Information Security Officer

Information Security Officer

Information Security Officer (ISO)

Information Security Officer (ISSO)

CHIEF INFORMATION SECURITY OFFICER (IT)

Chief Information Security Officer

Chief Information Security Officer (Information Systems Department)