Chief Information Security Officer

Role & responsibilities

• Develop and execute the Group's Information Security and Cybersecurity strategy.
• Lead and manage the Information Security Management System (ISMS) across the organization.
• Plan, coordinate, and ensure successful completion of ISO 27001, TISAX, customer, and internal security audits.
• Monitor cybersecurity threats, security incidents, vulnerabilities, and cyber-attack attempts, implementing proactive preventive measures.
• Ensure the confidentiality, integrity, and availability of enterprise information assets.
• Oversee enterprise firewall, network security, VPN, endpoint security, data center, and cloud security operations.
• Ensure secure and reliable connectivity across corporate offices, manufacturing plants, branches, and remote users.
• Lead cyber risk assessments, vulnerability management, penetration testing, and incident response activities.
• Establish security policies, standards, and governance frameworks aligned with business objectives.
• Evaluate and implement new cybersecurity technologies and best practices.
• Coordinate with ISPs, OEMs, cybersecurity vendors, and service providers while optimizing costs and service quality.
• Prepare and manage cybersecurity and IT infrastructure budgets.
• Lead, mentor, recruit, and develop the cybersecurity and infrastructure teams.
• Conduct periodic plant and branch visits to review IT infrastructure, security controls, and network availability.
• Drive cybersecurity awareness programs and promote a security-first culture across the organization.

Collaborate with business leaders and participate in Management Review Meetings (MRM) to support business and digital transformation initiatives

Preferred Certifications

• CISSP
• CISM
• ISO/IEC 27001 Lead Implementer/Lead Auditor
• CEH
• CCSP
• CompTIA Security+
• Fortinet, Palo Alto, Cisco Security, or equivalent certifications.