CISO as a Service

Il y a 4 semaines

, LU Stott and May Télétravail Temps plein

Gratuit avec email ou Google

Enregistrez cette offre et organisez votre recherche

Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.

Enregistrer le travail Enregistrer et créer une alerte

Gratuit avec email ou Google

Job Description
Interim CISO / CISO as a Service (Freelance)
- Role: Interim Chief Information Security Officer (CISO)
- Format: Freelance / Contract (100% FTE)
-

Location:
Luxembourg (On-site / Hybrid)
- Remote Work: Hybrid
- Duration: long term Mission Overview We are seeking a highly experienced, bilingual Interim CISO / Outsourced CISO to act as a strategic advisor to Management and drive the information security program for a prominent organization based in Luxembourg. This is a long-term freelance engagement through 2027. The selected consultant will take operational ownership of cybersecurity governance, ensure regulatory compliance with a specific focus on NIS2 , and systematically document security standards to prepare a seamless handover to a future permanent CISO.

Key Responsibilities
& Deliverables
- Governance, Compliance & Risk Management
- NIS2 Compliance: Align the organization’s cybersecurity measures and incident reporting mechanisms with NIS2 directive requirements.
- Risk Registry: Maintain, mature, and evolve the corporate cybersecurity risk register.
- Policy Management: Draft, update, and implement priority security policies, procedures, and documented standards.
- Reporting: Produce clear security dashboards, Key Risk Indicators (KRIs), and Key Performance Indicators (KPIs) for C-level Management.
- Operational Security & Architecture Support
- Architecture Boards: Participate in architecture reviews, evaluate security impacts for new projects, and issue formal security validations.
- Vulnerability Management: Supervise the technical vulnerability management lifecycle and track engineering remediation plans.
- Incident & Crisis Response: Lead the preparation for security incidents and organize business continuity/crisis management tabletop exercises.
- Knowledge Transfer & Handover
- Perform a comprehensive Cybersecurity Maturity Assessment and define a 12-to-24-month security roadmap.
- Ensure continuous knowledge transfer to internal IT and infrastructure teams.
- Compile a comprehensive Transition Playbook to guarantee a smooth ramp-up for the incoming permanent CISO. Required Profile & Skills Non-Negotiable Requirements
-

Experience:
10+ years of proven experience in Cybersecurity and IT Governance, with significant time spent as an active CISO, Interim CISO, or Senior GRC Consultant.
- Languages: Fluent in French and English (both written and spoken). The candidate must be comfortable presenting technical topics to French-speaking local teams and English-speaking board members.
- Regulatory & Frameworks: Deep knowledge of NIS2 requirements paired with a strong mastery of standard security frameworks (ISO 27001/2, NIST, CIS, or equivalent). Technical Competencies
- Solid experience securing hybrid environments, specifically Microsoft 365 / Entra ID, active directory, on-premises systems, and cloud infrastructures.
- Proven ability to review complex network/system architectures and communicate security design requirements to engineering teams. Interpersonal Skills
- Excellent communication, active listening, and "popularization" skills (ability to explain complex technical vulnerabilities in simple, risk-based business terms).
- Autonomous, highly organized, and capable of driving multi-stakeholder projects in a complex, regulated environment.

Recherches populaires

Salaire de CISO as a Service

Amériques

Europe

Asie / Océanie

Afrique

CISO as a Service

Enregistrez cette offre et organisez votre recherche

Recherches populaires

Offres similaires