P
Chief Information Security Officer
Sin especificarSin especificarSecurity Program ManagementInsurance
Lead the cybersecurity and information security strategy for a regulated insurance company, translating technology risks into business, regulatory, and reputational exposure. Partner with the CIO and senior leadership to oversee security governance, risk, protection, incident response, and AI policy
Responsabilidades
- Develop a multi-year, funded cybersecurity strategy; define risk appetite and report to executives, risk committees, and the board.
- Partner with the CIO on a shared technology roadmap and success measures, embedding security by design into projects from the requirements stage.
- Continuously manage security exposure based on asset sensitivity and business impact, including third-party and supply-chain risks.
- Oversee security operations and monitoring, identity and access management, Zero Trust, data protection, and business continuity.
- Lead end-to-end cyber incident response, including regulatory reporting.
- Establish AI and generative AI governance and controls, protect models and data, and use AI to strengthen security capabilities.
- Ensure compliance with insurance-sector regulation, privacy law, and information security regulations; manage relationships with internal audit, external auditors, and regulators.
Requisitos
- At least four years managing an information security function as a CISO, deputy CISO, or security leader in a complex organization.
- Experience in a regulated organization, such as insurance, banking, investment management, credit, or healthcare.
- Demonstrated experience working with regulators and auditors, leading reviews, developing policies and procedures, remediating gaps, and responding to supervisory questionnaires.
- Experience across legacy core systems, public cloud, SaaS, API architectures, and customer applications.
- Hands-on leadership of end-to-end cyber incidents, including real-time decisions, crisis management, and post-incident reviews.
- Experience managing budgets, teams, strategic vendors, and managed security services.
- Bachelor's degree in engineering, computer science, or information systems.
Se valora
- Experience in insurance or long-term savings.
- A master's degree or MBA.