Requirements: English
Company: Rochester Executive Advisory
Region: marche, italy , Marche
Global CISO (Chief Information Security Officer)
2 weeks ago Be among the first 25 applicants
Our Client is a private industrial group, backed by a leading international Private Equity.
Headquartered in Italy, they are the market leader in the production of high-mix low-volume PCB (Printed Circuit Boards), with a manufacturing footprint across Europe, North America, and Asia; they deliver tailor-made products for multiple sectors on a global scale.
The product portfolio stands out for its advanced technology and high reliability, offering a comprehensive service that covers the entire product life cycle and customer needs.
Position - The context:
Following a recent acquisition, the group is undergoing significant transformation and strengthening programs. A key priority is enhancing cybersecurity across both ICT and ICS/OT domains. Collaborating with internal stakeholders and external advisors, the focus is on defining and executing a cybersecurity roadmap to establish a robust security posture and support the companys long-term objectives.
Position The role:
The cybersecurity management system plays a pivotal role in safeguarding the organization''s business assets and maintaining its resilience through proactive risk management, compliance adherence, and continuous improvement efforts.
In this context, the new role of Global CISO (Chief Information Security Officer) is required. The CISO will report to the Global CIO and will have exposure to the Leadership Team, and will:
- Predominantly manage internal resources while simultaneously coordinating relationships with key external suppliers.
- Ensure the cybersecurity posture within IT and OT aligns with the group''s ambitions.
Position Specific responsibilities:
Leadership & Governance
- Develop and implement a global information security strategy aligned with the company''s business objectives.
- Establish and maintain a global information security framework, i.e., policies, protocols, and procedures, that comply with relevant laws, regulations, and industry standards.
- Ensure effective communication and adherence of policies, protocols, and procedures across all regions, as well as compliance with the latest laws and regulations related to information security and privacy.
- Ensure Compliance and Regulatory Adherence by meeting industry-specific regulations and cybersecurity standards (such as ISO/IEC 27001, NIST CSF, NIST SP 800-53, NIST SP 800-171, CMMC) to safeguard sensitive data and ensure business continuity.
- Provide regular reporting on the current status of the Cyber Security program to senior business leaders and the Board of Directors.
- Monitor and report IT-Security Key Performance Indicators (KPIs) to track effectiveness and identify areas for improvement.
Team & Budget Management
- Manage the company''s Cyber Security team across 7 countries, providing them with strategic direction and leadership.
- Manage the budget for the information security function, monitoring and reporting discrepancies.
Risk Management, Security Architecture & Security Operations
- Identify, assess, and mitigate cybersecurity risks associated with company operations, data assets, and technologies, including intellectual property protection and regulatory compliance.
- Conduct regular security audits and handle any breaches or security incidents that arise. Lead incident response efforts, both internal and external, during security breaches, and develop, test, and improve response plans for timely and effective threat management.
- Manage IT-Security Awareness Trainings to ensure staff understanding and adherence to security protocols.
- Manage the security architecture of the Group.
- Continuously monitor emerging cybersecurity threats, technologies, and best practices to adapt and enhance the company''s cybersecurity posture and resilience against evolving risks.
Business Alignment: Contribute to the overall technological strategy of the company.
Requirements:
Education and Certificates:
- Degree in Computer Science or equivalent experience with at least one IT-Security Certificate (e.g., CISSP, CISM, CISA, ISO 27001 LA/LI). Academic studies with special focus on IT-Security or a Master in cybersecurity or additional IT-Security Certificate would represent a plus.
Knowledge and experience:
- 10+ years experience in Information Security in Industrial/Manufacturing Industry with global footprint.
- Strong preference for candidates with experience in the Aerospace, Defense, Medical market sec