Chief Information Security Officer (CISO)
We are looking for a Chief Information Security Officer (CISO), responsible for ensuring that company’s information systems and data are secure from cyber threats, data breaches, and other security risks.
Role Overview
The CISO develops and implements security policies, monitors systems for vulnerabilities, and works to prevent unauthorized access to data. The ideal candidate will hold a critical role in safeguarding the company’s digital assets, protecting sensitive data, and ensuring the continuity of operations in the face of security challenges.
Main Responsibilities
Develop and implement a strategic, long-term information security strategy and roadmap to ensure that company’s information assets are adequately protected.
Lead the design and implementation of security policies, procedures, and guidelines in accordance with regulatory standards (e.g., GDPR, HIPAA, PCI-DSS).
Conduct information security risk management to identify security threats, vulnerabilities, and potential impacts, make recommendations and implement measures to mitigate risks and strengthen security posture.
Assess the security posture of third-party vendors and partners.
Develop and maintain an incident response plan to address security breaches or cyber attacks.
Lead the investigation, containment, and remediation of security incidents and coordinate with internal teams and external partners for incident response and recovery.
Conduct regular security audits, penetration tests, and vulnerability assessments.
Organize and deliver security training programs to employees, and promote a culture of security awareness across the organization.
Monitor network traffic, systems, and applications for potential security breaches or suspicious activity.
Implement intrusion detection / prevention systems and other monitoring tools.
Provide regular security reports to executive leadership, including risk assessments and incident summaries.
Design and implement security controls and infrastructure to protect sensitive data.
Manage the selection, deployment, and configuration of security technologies (e.g., firewalls, encryption, antivirus).
Ensure secure development practices for in-house and third-party applications.
Collaborate with IT and Legal/Compliance Teams to integrate security solutions with IT infrastructure and to align security policies with laws and regulations.
Develop and test business continuity plans and disaster recovery strategies, and ensure that critical systems can recover quickly in the event of a security breach or disaster.
Benefits
The company invests in long-term cooperation and provides a modern and stable work environment. We offer a competitive remuneration package and excellent career prospects, coupled with continuous training and development.
Applications
All applications will be treated with strict confidentiality and successful candidates will be contacted.
At Ethniki Asfalistiki, we believe in creating an inclusive workplace that values diversity and celebrates the unique contributions of each individual.
We are an equal opportunity employer, and we recognize that a diverse workforce is essential for our success. By bringing together people from different backgrounds and experiences, we can promote a more innovative, creative, and productive work environment.
We are committed to fostering a culture of belonging where everyone feels respected, valued, and empowered to contribute their best.