Senior Enterprise Information Security Leader

The ABG Group seeks a seasoned Chief Information Security Strategist to lead and oversee the information security strategy and operations across 36 countries. The ideal candidate will be responsible for ensuring the confidentiality, integrity and availability of our data, systems and assets, as well as managing the security risks and compliance requirements of our diverse businesses.

The successful Chief Information Security Strategist will report directly to the Group CIO and be a key member of IT and Digital leadership team. They will work closely with business unit leaders, IT heads, legal and regulatory teams, and external stakeholders to align the information security vision and objectives with the group's overall strategy and goals.

Key Responsibilities Include:

• Define and implement a comprehensive information security framework, policies, standards, guidelines and best practices in alignment with industry benchmarks and regulatory requirements.
• Establish and maintain the information security governance structure, including roles, responsibilities, committees, processes and metrics to measure and monitor the effectiveness and performance of the information security program.
• Develop and execute the information security roadmap, budget and resource allocation, and prioritize initiatives and projects based on risk assessment and business impact analysis.
• Lead and manage the information security team, including hiring, training, mentoring and evaluating staff, and ensuring their professional development and career growth.
• Oversee information security operations, including identification, prevention, detection, response and recovery from cyber threats and incidents, and implementation and maintenance of security tools and technologies.
• Coordinate and collaborate with business units, IT teams, internal audit, legal and compliance, and external partners and vendors to ensure integration and alignment of information security policies and controls across the group.
• Chair the group CISO council and direct all business CISOs.
• Promote and foster information security awareness and culture among employees, customers, suppliers and other stakeholders, and provide regular communication and reporting on information security status, issues and trends.
• Stay abreast of latest information security developments, trends, threats, vulnerabilities, best practices and standards, and provide strategic guidance and recommendations to senior management and the board.

Qualifications: A bachelor's degree or higher in computer science, information technology, information security, or related field, and relevant professional certifications such as CISSP, CISM, CISA, CRISC, etc.

Required Skills:

• At least 20 years of progressive experience in information security, risk management, IT governance, or related domains, preferably in a diversified conglomerate or a large multinational organization.
• Proven track record of designing, implementing and managing a comprehensive and effective information security program, and delivering successful outcomes and value to the business.
• Strong leadership, communication, presentation and interpersonal skills, and ability to influence and collaborate with senior executives, peers, staff and external parties.
• Strategic, visionary and innovative mindset, and ability to balance big picture and details, and risks and opportunities.
• Sound knowledge and understanding of information security principles, practices, standards, frameworks, regulations and laws, and their applicability and implications to different business sectors and geographies.