Companies in this catalog do not charge applicants. Never send money to apply.
Role Purpose
The Head of Information Security & Enterprise Risk Management is a senior executive responsible for designing, governing, and continuously strengthening an enterprise-wide cyber security, information risk, and technology risk framework across a complex, multi-business, multi-technology environment .
This role requires deep specialization in advanced cyber security architecture, global regulatory compliance, and large-scale risk governance .
Key Responsibilities
Enterprise Information Security Leadership
Design and own the enterprise-wide information security strategy , aligned with global standards (ISO, NIST, COBIT) and evolving threat landscapes
Establish and govern security architecture across on-premise, cloud, hybrid, OT, and IoT environments
Act as the final authority on cyber risk acceptance , escalation, and mitigation
Cyber Risk & Threat Management
Lead advanced cyber threat intelligence, attack simulation, and incident response programs
Oversee Security Operations Center (SOC) models, including SIEM, SOAR, threat hunting, and forensic investigations
Lead crisis response for major cyber incidents , ransomware events, or data breaches
Enterprise Risk Management (Technology & Digital Risk)
Integrate technology risk, cyber risk, data risk, and third-party risk into the broader ERM framework
