Leadership & Team Management:

• Ability to Lead and manage a potential Information Security Team, ensuring alignment with organizational goals and compliance requirements.
• Plan and create new roles if needed, determining required talents, hiring, and team development.
• Foster a collaborative and innovative culture while resolving escalations to maintain operational efficiency.

Strategic Planning & Compliance

• Develop and implement the information security strategy to meet ISO 27000, NIS2, GDPR, and CRA requirements.
• Maintain and update the ISMS, incorporating regulatory changes and best practices into policies and processes.
• Lead audits for ISO 27000 compliance and address non-conformities to drive improvements.

Resource Management & Budgeting

• Allocate resources effectively to meet project requirements and workload.
• Prepare and manage budgets for tools and resources (CAPEX and OPEX).
• Collaborate with leadership to secure funding and support for security initiatives.

Risk Management & Incident Response

• Conduct risk assessments, vulnerability scans, and audits to identify threats and prioritize mitigation.
• Lead the incident response plan in compliance with NIS2, ensuring incidents are documented and resolved effectively.
• Monitor third-party vendor risks and ensure alignment with security standards and regulatory requirements.

Technical Oversight & Innovation

• Oversee the deployment and management of a robust SIEM environment integrated with critical infrastructure.
• Implement advanced tools like Microsoft Sentinel, Elastic, and encryption technologies to enhance security capabilities.
• Validate key security documentation, including compliance reports and risk assessments.

Continuous Improvement

• Refine security processes, tools, and strategies based on emerging threats and lessons learned from incidents.
• Continuously adopt new technologies and methodologies to strengthen the organization’s security posture.

Business Continuity & Representation

• Ensure business continuity with agile security architectures adaptable to evolving threats.
• Represent the Information Security Team in terms of responsibility and engagements, aligning with organizational goals.
• Establish and monitor KPIs to evaluate performance and report progress to leadership