Chief Security Officer

**About us**

Our mission is to help millions of people succeed in life, whatever that means for them, by providing the highest quality information in the smartest way so they can make the best-informed decisions possible. To do this, we’re looking for individuals to join a team where product quality means everything, where you’ll be given the opportunity to develop your best work, and where the fruits of your labour will be seen by millions of people each and every day.

**The Role**:
As our CSO, you will develop and implement comprehensive security strategies, policies and procedures aligned with industry best practices and regulatory requirements. You will work closely with cross-functional teams to identify risks, devise preventive measures and ensure compliance with relevant infrastructural and cybersecurity regulations.

This is an excellent opportunity for an accomplished security professional to make a significant impact and drive the security agenda in a dynamic and forward-thinking company. We offer a collaborative and inclusive work environment, where your knowledge and contributions will be valued.

Developing and implementing a comprehensive security framework to protect the company's assets and infrastructure.

Designing and implementing security policies, procedures and protocols to mitigate risks and maintain a secure environment.

Investigating and monitoring incident response activities, including investigations, root cause analysis and developing corrective actions.

Collaborating with cross-functional teams to assess risks, identify vulnerabilities and devise preventive measures.

Establishing and maintaining strong relationships with external stakeholders, such as regulatory bodies, law enforcement agencies and industry associations.

Leading security awareness programs and training initiatives to educate employees about best practices and potential threats.

**Your tasks**:
Conduct regular security audits and risk assessments to identify vulnerabilities and ensure compliance with relevant regulations.

Implement and manage security technologies, like firewalls, intrusion detection systems and access controls.

Ensure the organisation's compliance with applicable security-related laws, regulations and standards.

Monitor security systems and networks for potential threats, promptly investigating and mitigating security incidents.

Oversee the management of physical security measures, including access controls, CCTV systems, and security personnel.

Develop and maintain incident response plans, ensuring timely and effective responses to security breaches.

Manage records, documentation and reporting to demonstrate compliance and facilitate audits.

Collaborate with internal teams to integrate security considerations into developing new products and services.

Stay updated with the latest security trends, technologies and regulatory changes, ensuring continuous improvement of the security function.

**Required skills and qualifications**:
A bachelor's degree in computer science, information security or a related field.

Relevant certifications such as CISSP, CISM, or CRISC.

7+ years of experience in a senior security management role, with a demonstrable track record of developing and implementing security strategies and frameworks.

Excellent knowledge of applicable laws, regulations, and industry standards related to infrastructure security in an organisation.

Deep understanding of cybersecurity, data protection regulations and industry best practices.

Strong leadership and communication skills, with the ability to collaborate effectively with cross-functional teams and senior management.

Analytical mindset and strong problem-solving skills to assess risks, analyse complex security issues and develop appropriate solutions.

Up-to-date knowledge of emerging security threats, trends and technologies.

Experience in conducting security audits, risk assessments and managing incident response processes.

Knowledge of security frameworks, such as ISO 27001 and NIST Cybersecurity Framework.