Chief Information Security Officer (CISO)

About the role

The Chief Information Security Officer (CISO) leads the organization’s cyber‑defence strategy, safeguarding data and ensuring the resilience of IT services. Reporting to executive management, the CISO coordinates with the Data Protection Officer, IT department and federal authorities to meet regulatory requirements such as NIS2 and GDPR.

Key responsibilities

• Lead federal audits related to IT security and ensure compliance.
• Develop, implement and monitor security policies and procedures.
• Identify, evaluate and report IT risks to senior management.
• Promote a strong cybersecurity culture and awareness across the workforce.
• Manage security incidents in collaboration with the IT team and communicate with management and authorities.
• Conduct periodic checks and assessments of existing security controls.
• Serve as the primary liaison with federal cybersecurity authorities.

Required profile

• Minimum 10 years of enterprise IT experience, including at least 5 years in information security.
• Master’s degree in Computer Science, Information Systems Security or Engineering Sciences.
• Strong ability to balance cybersecurity risks with business priorities and to communicate risk in business terms.
• Relevant certifications such as CISSP, CISM, CISA, ISO 27001 or ISO 27005 are desired.

Required skills

• Firewalls, anti‑virus solutions and encryption technologies.
• Microsoft Entra ID and Identity & Access Management (IAM) concepts.
• Client/server architecture and network technologies.
• In‑depth knowledge of the NIS2 directive and GDPR.
• International information‑security standards (ISO 27001, ISO 27005).