Chief Information Security Officer

Quick Facts

• Role: Chief Information Security Officer (CISO)
• Work model: Full remote within the European Union; occasional travel for governance meetings, workshops, audits, and strategic initiatives
• Engagement: Long-term assignment
• Rate: 450 EUR/MD

Description

We are seeking an experienced CISO to lead and oversee the information security strategy for a major European Institution operating under a Managed Services and Framework Contract environment. The CISO will define, implement, and govern the organization’s cybersecurity strategy, ensuring protection of information assets, regulatory compliance, risk management, and cyber resilience.

Responsibilities

• Cybersecurity Strategy & Governance
  • Define, maintain, and execute the organization’s cybersecurity strategy
  • Develop and enforce security policies, standards, and procedures
  • Establish security governance frameworks aligned with business objectives
  • Advise senior management on cybersecurity risks and strategic decisions
  • Promote a security-first culture across the organization
• Risk Management
  • Lead enterprise-wide cybersecurity risk assessments
  • Identify, evaluate, and mitigate security threats and vulnerabilities
  • Maintain and report on the organization’s risk posture
  • Ensure risk treatment plans are implemented and monitored
• Compliance & Regulatory Requirements
  • Ensure compliance with applicable European regulations, standards, and security frameworks
  • Oversee security audits, assessments, and compliance reviews
  • Support internal and external audit activities
  • Monitor regulatory developments impacting cybersecurity and data protection
• Security Operations & Incident Management
  • Oversee security monitoring, threat detection, and incident response activities
  • Lead response to major cybersecurity incidents and crisis situations
  • Ensure appropriate business continuity and disaster recovery capabilities
  • Drive continuous improvement of security operations
• Security Architecture & Technology
  • Provide strategic direction for secure architecture and infrastructure design
  • Ensure adoption of Security by Design and Privacy by Design principles
  • Oversee cloud security, network security, endpoint protection, IAM, and data security initiatives
  • Review and approve security requirements for new projects and services
• Stakeholder & Vendor Management
  • Act as the primary cybersecurity advisor to executive leadership and stakeholders
  • Collaborate with technology teams, service providers, and external partners
  • Ensure suppliers comply with contractual cybersecurity obligations
  • Participate in Framework Contract governance and security reviews

Requirements

• Mandatory
  • Master’s degree or equivalent in Computer Science, Information Security, Cybersecurity, Engineering, or related discipline
  • 10 to 20 years of professional experience in Information Security and Cybersecurity
  • Proven experience as a CISO, Deputy CISO, Head of Security, or Senior Information Security Management role
  • Strong knowledge of cybersecurity governance, risk management, and compliance
  • Experience managing cybersecurity programs in large and complex organizations
  • Excellent communication and stakeholder management skills
  • Fluent English (written and spoken)
  • Citizenship of an EU Member State
• Preferred
  • Experience working with European Institutions, EU Agencies, NATO, international organizations, or government bodies
  • Experience in Managed Services and Framework Contract environments
  • Knowledge of NIS2, DORA, GDPR, ISO 27001, and other cybersecurity frameworks
  • Experience securing cloud environments such as Microsoft Azure, AWS, or Google Cloud
• Certifications (highly desirable)
  • CISSP, CISM, CRISC
  • ISO 27001 Lead Implementer, ISO 27001 Lead Auditor
  • CCSP
  • GIAC Certifications
  • TOGAF (asset)

Benefits

• Full remote work within the European Union, with occasional travel
• Opportunity to lead strategic cybersecurity initiatives
• International and multicultural environment
• Exposure to large-scale, mission-critical digital transformation programs