Chief Information Security Officer Manager

Manager – Chief Information Security Officer (CISO)

Position Title:
Manager – Chief Information Security Officer (CISO)

Reporting To:
Executive Director / Chief Operating Officer

Job Purpose:
To lead and manage the Company's information security strategy, cyber security framework, governance, and risk management initiatives to ensure the confidentiality, integrity, and availability of information assets.

Key Responsibilities:

• Develop and implement enterprise-wide information security strategies.
• Establish cyber security governance frameworks and policies.
• Conduct security risk assessments and vulnerability management programs.
• Lead cyber incident response and business continuity initiatives.
• Ensure compliance with CBSL regulations and industry security standards.
• Manage penetration testing, security audits, and third-party security assessments.
• Monitor security operations and emerging cyber threats.
• Report security posture and risks to senior management and the Board.
• Build and maintain a security-conscious culture across the organization.

Qualifications & Experience:

• Bachelor's Degree in Information Security, IT, Computer Science, or related field.
• CISP, CISM, CEH, ISO 27001 Lead Implementer/Auditor or equivalent certifications.
• Minimum 8 years' experience in information security, with at least 3 years in a leadership role.
• Prior experience in banking or finance sector preferred.

Key Competencies:

• Cyber Security Governance.
• Information Risk Management.
• Regulatory Compliance.
• Leadership and Strategic Thinking.

Please send your CVs to manager@topjobs.lk mentionaing the position applied for in the subject line.