CL

Chief Information Security Officer

Ceylinco Life Insurance Limitedtopjobs.lk
Oct 24, 2026, 8:02 AM3d ago
Colombo 5SecurityExecutive (4+ yrs)

About the role

The Chief Information Security Officer at Ceylinco Life will be responsible for developing, managing, and operationalising the company's information security and cyber-security strategy. The role involves providing independent oversight, leading risk assessments, ensuring compliance with regulatory requirements, maintaining incident response and business continuity, and overseeing security monitoring and controls. The successful candidate will report directly to the Managing Director/Chief Executive Officer and work closely with various business functions to strengthen the company's security posture. A Bachelor's or Master's degree in a relevant field and at least 4 years of leadership experience in information security or related disciplines are required.

Must have

  • A Bachelor’s or Master’s Degree in Information Security, Cyber Security, Computer Science, Information Technology or a closely related discipline.
  • A recognised professional information-security qualification such as CISSP, CISM, CISA, CRISC, GISP or CSIRT.
  • Minimum of 4 years experience in a leadership role in information security, cyber security, technology risk or related disciplines, preferably within banking, insurance, financial services or another highly regulated environment.
  • Strong practical knowledge of cyber-security governance, security architecture and controls, incident response, SOC operations, vulnerability management, penetration testing, data protection, cloud security, third-party security risk and business continuity.
  • Sound understanding of recognised information-security and cyber-risk frameworks and regulatory expectations.
  • Proven ability to communicate complex cyber and technology risks clearly to the Board, management committees and senior management, translating technical vulnerabilities into business, operational, financial and reputational risk.
  • Strong leadership, stakeholder-management, judgement and communication capabilities.
  • The independence and professional standing required to challenge technology and business decisions where material information-security risks arise.

Technologies

  • CISM
  • CISSP
  • Cloud Security
  • DLP
  • IAM
  • Penetration Testing

Highlights

Applications should be sent to the Assistant General Manager - Human Resources (nuwanw@ceylife.lk), mentioning 'Chief Information Security Officer' in the subject line. The position is based at the Head Office in Colombo. An attractive remuneration package is offered. Minimum qualification includes a recognised professional information-security certification such as CISSP, CISM, CISA, CRISC, GISP or CSIRT.