Chief Security Officer

This position plays a key role in ensuring the organization's security compliance optimization. To accomplish this, you will be responsible for managing all security assessments and monitoring their progress to ensure that internal systems are compliant with industry standards.

The ideal candidate will have a strong background in IT, compliance, and/or information security. They should also possess excellent analytical and critical thinking skills, as well as the ability to work effectively across all levels of seniority within business teams.

Beyond these technical skills, the successful candidate will also possess excellent communication skills, both oral and written, as well as good interpersonal skills. They should be highly driven and self-motivated, with the ability to produce effective influence and persuasive arguments in support of security assessment process goals.

• Serve as an advanced technical advisor for third-party assessments, providing detailed security insights and solutions.
• Perform in-depth security reviews and risk assessments for new and existing third-party vendors, ensuring compliance with organizational and regulatory requirements.
• Demonstrate advanced knowledge in RELX security compliance policies and procedures.
• Stay current with updates and developments in security standards such as OWASP Top 10, ISO27001, and SOC 2, and ensure their proper implementation across the organization.
• Develop and deliver training and awareness on security policies and standards to business units.
• Gain in-depth knowledge of the organization's major infrastructure security controls, ensuring they align with industry best practices and regulatory requirements.
• Coordinate with technology/service owners and business owners to conduct annual security audits, vulnerability assessments, and penetration tests where applicable.
• Work collaboratively within all business areas and key stakeholders to ensure the review and approach of all security governance, risk, and compliance scope is appropriate and proactive.
• Ensure continuous monitoring and reporting of compliance and risk status against NIST2.0, industry frameworks, and regional and global regulations.
• Support internal and external audits by providing detailed documentation and evidence of security controls and practices.
• Act as a point of escalation for security-related incidents, providing advanced security support and guidance to team members.
• Provide regular updates and at least monthly metric reports to management on security compliance and risk posture.

We seek individuals with the following qualifications and skills:

• Bachelor's Degree holder.
• Background in IT, compliance, and/or information security.
• Ability to work effectively across all levels of seniority within business teams.
• Strong analytical and critical thinking skills.
• Understanding of industry standards for IT security (e.g., ISO27001/2, SOC 2, PCI DSS).
• Basic understanding of IT security applications (e.g., firewalls, intrusion detection, virus protection).
• Understanding of IT security testing and vulnerability management, and Threat Modeling.
• Understanding in Cloud Environment (e.g., AWS, Azure or GCP)
• Understanding of Service Level Management.
• Desired understanding of OneTrust portal or Similar.
• With CompTIA Security+ or Similar or Higher.

This is an exciting opportunity to join our team and contribute to the success of our organization. As a valued member of our team, you can expect:

• A competitive salary and benefits package.
• Ongoing training and development opportunities.
• A dynamic and supportive work environment.
• The chance to work with a talented and experienced team.

To apply for this exciting opportunity, please submit your resume and a cover letter outlining your qualifications and experience. We look forward to hearing from you