Be the first to apply!
Chief Information Security Officer (CISO)
Alliance Finance Company PLC
Colombo •
Full-time
Job Description
We are seeking a highly experienced and strategic professional to join our team as the Chief Information Security Officer (CISO). This role is critical in ensuring the security, integrity, and resilience of our information systems while maintaining compliance with regulatory requirements, including those of the Central Bank of Sri Lanka.
Job Profile
- Develop and execute the Company's Information Security Strategy aligned with business objectives and regulatory requirements.
- Ensure compliance with guidelines issued by the Central Bank of Sri Lanka and other applicable regulations.
- Lead enterprise-wide cybersecurity initiatives, including threat management, incident response, and risk mitigation.
- Establish and maintain Information Security policies, procedures, and governance frameworks.
- Oversee IT security operations, including
- vulnerability assessments, security monitoring, and disaster recovery.
- Manage enterprise-wide cybersecurity risks through assessments, mitigation, and continuous monitoring.
- Ensure data protection through robust controls on confidentiality, integrity, access, and encryption.
- Drive information security awareness and culture across the organization.
- Manage third-party and vendor security risks in line with regulatory requirements.
- Provide regular updates to Senior Management and the Board on cybersecurity posture and key risks.
Applicant's Profile
- Master's Degree in Information Security or Master's Degree in Computer Science/Information Technology specializing in security.
- Professional certifications such as CISSP, CISM, or CISA are essential.
- Minimum 8-10 years' experience in IT/Information Security, with at least 3-5 years in a senior leadership role.
- Prior experience in the Banking/Finance/NBFC sector is highly desirable.
- Strong knowledge of cybersecurity frameworks (ISO 27001, NIST) and regulatory requirements.
- Excellent leadership, communication, and stakeholder management skills.
Please submit your CV with names and contact details of two non-related referees, within 10 days of this publication to reach the following address