Chief Information Security Officer

About the role

Toreon is seeking an experienced Chief Information Security Officer (CISO) to lead its GRC and privacy practice. You will partner with ICT project managers, IT directors, and client stakeholders to raise security maturity and achieve governance goals such as ISO 27001 certification.

Key responsibilities

• Assess customers' security environments, identify risks, and develop risk treatment plans.
• Design and roll out a comprehensive security roadmap aligned with business objectives.
• Implement and manage an Information Security Management System (ISMS) and related policies, processes, and standards.
• Guide customers through security certifications and ensure continuous improvement of security posture.
• Act as a trusted advisor, communicating security strategies to technical teams and senior management.

Required profile

• Minimum 5 + years of experience in cybersecurity, with a focus on governance, risk, and compliance.
• Strong project‑management capabilities and ability to balance business goals with security best practices.
• Excellent communication and persuasion skills, able to build relationships with clients and internal teams.
• Professional discretion when handling sensitive information.

Required skills

• ISO 27005 risk‑management methodology
• ISO 31000 risk‑management framework
• COSO internal‑control framework
• ISO 27001 (ISO 27k) certification processes
• Implementation and operation of an ISMS

What we offer

• Opportunity to work on high‑impact security projects with a team of 20+ GRC specialists.
• Continuous learning environment with coaching, training, and knowledge‑sharing.
• Chance to influence the security maturity of diverse organizations.