Chief Information Security Officer at Julius Berger

Job Summary

The Jobholder is responsible for developing and implementing security strategies that protect the company’s data and systems from cyber threats. They ensure the company’s IT security system adheres to regulatory requirements and analyse security threats to the computer system in real time.

Job Details

• Create the information security budget and resources and oversee them.
• Developing, justifying, and evaluating cybersecurity investments
• Develop and implement a cybersecurity strategy with clear timelines and deliverables.
• Monitor progress against established deadlines and adjust plans as needed to ensure on-time performance.
• Develop and enforce an incident response framework with defined timelines for containment, resolution, and reporting.
• Stay up to date with the latest security threats and best practices, and adapt the company’s security strategy accordingly
• Raising security awareness throughout the organization
• Educate staff in the organization on the best IT practices and regulatory requirements
• Ensure compliance with relevant laws, regulations, and industry standards related to data security and privacy
• Develop and execute the organization’s cybersecurity strategy in a way that is aligned with business objectives.
• Serve as the executive authority on all cybersecurity matters.
• Implementing and managing the cyber governance, risk, and compliance (GRC) process
• Enable the organization to be innovative in a safe and secure way

Requirements

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field. 
• Advanced certifications preferred CISSP, CISM, CISA, or other relevant certifications.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Demonstrated expertise in managing security operations in a complex, multinational environment.
• In-depth knowledge of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, COBIT).
• Experience with risk assessment, mitigation planning, and regulatory compliance.
• Proficiency in security technologies, including firewalls, IDS/IPS, SIEM, and encryption.
• Strong analytical and strategic thinking abilities.