Director of Risk, Security, and IT

What you’ll achieve:

The Director of Risk, Security, and IT – Global CISO (Certified Chief Information Security Officer) will spearhead the organization’s cybersecurity, risk management, and IT infrastructure strategies. Acting as the Global senior leader for Cybersecurity Operations, this role safeguards operational integrity by ensuring compliance with regulatory standards and embedding a culture of security awareness organization wide. As a Certified Chief Information Security Officer (C/CISO), this role will oversee cybersecurity protocols with a focus on cloud security and resilient IT operations.

In addition to driving robust cybersecurity and risk management frameworks, this role strengthens the organization's IT infrastructure against emerging threats and regulatory demands. The Director will lead and mentor teams to successfully align with the organization’s growth and resilience goals, supporting both digital and operational security across all systems.

 Essential Duties

• Leadership & Strategy Development:
  • Provide strategic direction and oversight for the organization’s risk management and cybersecurity framework.
  • Lead the development and implementation of comprehensive security strategies aligned with Outseer’s objectives, incorporating best practices for risk assessment and management.
  • Develop and execute department strategy and roadmap in collaboration with business stakeholders and company priorities.
• Team Management:
  • Build, mentor, and manage a high-performing team of security analysts, engineers, and IT professionals.
  • Foster a culture of collaboration and continuous improvement across multidisciplinary teams.
• Operations:
  • Oversee day-to-day security operations, ensuring effective detection, prevention, and response to cybersecurity incidents.
  • Drive the design and implementation of security measures for cloud environments, including risk assessments, vulnerability management, and incident response protocols.
  • Oversee IT operations and maintenance, ensuring the availability, performance, and security of IT infrastructure and systems.
• Regulatory Compliance:
  • Ensure adherence to relevant regulatory requirements and industry standards including GDPR, ISO, and SOC 2.
  • Conduct regular audits and assessments, implementing governance frameworks to maintain compliance and accountability in security practices.
• Risk Assessment:
  • Perform ongoing risk assessments related to IT infrastructure and cybersecurity threats, identifying potential vulnerabilities and developing mitigation strategies.
• IT Infrastructure Management:
  • Oversee IT operations and infrastructure management to ensure optimal performance, reliability, and cost-effectiveness.
  • Collaborate with IT teams to implement framework policies and procedures to enhance service delivery and operational efficiency.
• Incident Response & Business Continuity:
  • Drive the organization’s incident response plan, ensuring readiness and effective execution when cyber events occur.
  • Lead business continuity planning and recovery efforts for critical information systems, aligning with organizational goals.
• Vendor and Stakeholder Engagement:
  • Establish and maintain strong relationships with strategic partners, vendors, and stakeholders to optimize risk and security posture.
  • Collaborate with internal departments such as legal, compliance, and corporate communications to align security initiatives with business objectives.
• Measurement & Improvement:
  • Develop key performance indicators (KPIs) and metrics to measure the effectiveness of risk, security, and IT operations.
  • Provide regular updates and reports to senior leadership on the status of risk management initiatives, security incidents, and infrastructure performance.

 Desired Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree or higher is preferred.
• 12+ years of experience in information security, risk management, and IT operations, with a minimum of 5 years in a department leadership role.
• Strong knowledge of cybersecurity frameworks, risk management practices, and ITIL principles.
• Proven experience with cloud security strategies and frameworks.
• Excellent problem-solving, analytical, and decision-making skills.
• Exceptional interpersonal and communication skills with the ability to convey complex technical topics to diverse audiences.
• Relevant certifications such as CISO, CISSP, CISM, or CISA are highly desirable.

 Desired Behaviors

• Strategic Alignment: Cascades strategic goals into departmental goals, ensuring alignment between the two. Translates broader organizational objectives into actionable targets for the department.
• Execution Focus: Sets high performance standards and drives execution. Mobilizes resources, removes barriers to success, and holds both self and others accountable for achieving results.
• Change Leadership: Drives change by challenging assumptions, taking responsibility for leading and executing change initiatives. Actively seeks opportunities to improve processes and embraces a proactive approach to change.
• Effective Decision-Making: Makes sound and timely decisions using problem-solving, decision-making, and planning tools. Analyses situations, gathers relevant information, and takes corrective action when necessary.
• Employee Development: Recognizes and understands the development needs and aspirations of employees. Takes these into consideration when assigning roles and responsibilities, fostering growth, and providing opportunities for skill enhancement.
• Employee Well-Being: Knows employees individually and cares for their well-being. Communicates their importance and value through words and actions, creating an environment where employees feel supported and appreciated.
• Clear Communication: Over-communicates by clearly translating corporate goals into departmental goals and targets. Communicates with passion and purpose, inspiring employees to listen and understand the strategic direction.
• Employee Engagement: Creates an environment that values listening to employees and encourages them to communicate their ideas. Actively seeks input, promotes open dialogue, and recognizes the importance of employee contributions.
• Ethical Conduct and Competence: Displays ethical character and competence, building trust through actions that align with integrity and intent. Demonstrates professional credibility in their role.
• Role Modelling: Serves as a role model for others by displaying high levels of commitment and energy. Demonstrates the organization's core values and sets high standards of behavior. Influences others positively and acts as a good citizen of Outseer.