Chief Information Security Officer (CISO)
About the role
The Chief Information Security Officer (CISO) will provide strategic leadership and full oversight of the organization's information and cybersecurity framework within a leading enterprise in the regulated banking, financial services, and telecommunications sector in Sri Lanka. The role is responsible for establishing and maintaining an enterprise-wide information security strategy, protecting information assets, customer data, and technology platforms from cyber threats, and ensuring compliance with regulatory requirements and business objectives. Key responsibilities include formulating security strategy, managing cyber risk, overseeing security controls and incident response, ensuring data protection and compliance, managing third-party security, enhancing cyber resilience, and leading the security team and awareness programs. The position requires significant experience in information security leadership, industry-specific background, and relevant professional certifications.
Must have
- Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, Business Administration, Marketing, or Finance / Management Accounting.
- Minimum 10 to 15 years of progressive experience in Information Security, Cybersecurity, Technology Risk, or IT Governance, with at least 5 years in a senior managerial or leadership role.
- Essential background within Banking, Financial Services, or Telecommunications.
- Sound exposure to recognized information security standards including ISO/IEC 27001, NIST Cybersecurity Framework, cloud security, SOC operations, identity access management, and vulnerability remediation.
- Demonstrated ability to present complex risk profiles to Board-level committees, lead multidisciplinary security teams, and collaborate across Legal, Risk, Compliance, and Audit functions.
Nice to have
- A Master’s Degree in Cybersecurity, Information Security, IT, or Business Administration is considered an added advantage.
- Recognized credentials such as CISSP, CISM, CRISC, CCISO, or ISO/IEC 27001 Lead Implementer/Auditor are highly advantageous.
Technologies
- CISM
- CISSP
- Cloud Security
- Cybersecurity
- Fintech
- IAM
- NIST
- Penetration Testing
Highlights
The role is based in Sri Lanka and is a full-time executive leadership position. A Master's degree and professional certifications such as CISSP, CISM, CRISC, CCISO, or ISO/IEC 27001 Lead Implementer/Auditor are considered advantageous. The position requires experience specifically within the banking, financial services, or telecommunications sectors.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka