Chief Information Security Officer (CISO)
About the role
The Chief Information Security Officer (CISO) will provide strategic leadership and full oversight of the organization's information and cybersecurity framework. This executive role involves establishing and maintaining an enterprise-wide security strategy to protect information assets, customer data, and technology platforms against cyber threats, ensuring compliance with regulatory requirements and business objectives. Key responsibilities include formulating security strategy, managing cyber risk, overseeing security controls and incident response, ensuring data protection and compliance, managing third-party security, enhancing cyber resilience, and leading security awareness and team development. The organization operates in the regulated banking, financial services, and telecommunications sector, offering a leadership environment for an accomplished security professional.
Must have
- Bachelor’s Degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, Business Administration, Marketing, or Finance / Management Accounting
- Minimum 10 to 15 years of progressive experience in Information Security, Cybersecurity, Technology Risk, or IT Governance, with at least 5 years in a senior managerial or leadership role
- Essential background within Banking, Financial Services, or Telecommunications
- Sound exposure to recognized information security standards including ISO/IEC 27001, NIST Cybersecurity Framework, cloud security, SOC operations, identity access management, and vulnerability remediation
- Demonstrated ability to present complex risk profiles to Board-level committees, lead multidisciplinary security teams, and collaborate across Legal, Risk, Compliance, and Audit functions
Nice to have
- A Master’s Degree in Cybersecurity, Information Security, IT, or Business Administration is considered an added advantage
- Recognized credentials such as CISSP, CISM, CRISC, CCISO, or ISO/IEC 27001 Lead Implementer/Auditor are highly advantageous
Technologies
- CISM
- CISSP
- Cloud Security
- Cybersecurity
- Fintech
- IAM
- NIST
- Penetration Testing
Highlights
The position is based in Colombo, Sri Lanka. The role requires a background in banking, financial services, or telecommunications. Professional certifications such as CISSP, CISM, CRISC, CCISO, or ISO/IEC 27001 Lead Implementer/Auditor are highly advantageous. A Master's degree is considered an added advantage. The role is executive-level and involves reporting to senior management and board committees.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka