Head of Information Security, Nicosia – HOIS/05/26

Our client is seeking to recruit an experienced and highly motivated Head of Information Security to lead the development, implementation, and continuous improvement of the organisation’s information security framework. The successful candidate will work closely with senior management and internal stakeholders to ensure the effective protection of the company’s information assets, systems, and infrastructure, while maintaining compliance with regulatory and industry standards.

Main Responsibilities

Contribute to the implementation and communication of the Information Security
Framework across business processes, applications, and infrastructure technologies.
Provide advice and recommendations to the Board regarding the development and implementation of information security policies, standards, procedures, and processes.
Ensure the effective development, documentation, and implementation of information security policies and procedures.
Oversee the communication and correct implementation of the information security framework across the organisation.
Collaborate with operational support units and internal control functions to ensure the effective application of security principles.
Develop and implement information security risk assessment and risk management programs in collaboration with the Risk Management function.
Participate in the implementation of safeguards within the IT infrastructure and provide guidance to relevant IT teams.
Monitor staff compliance with information security policies, standards, and procedures.
Work closely with IT, Legal, Compliance, Risk Management, and Data Protection stakeholders.
Lead initiatives related to cyber security controls, privacy, and personal data protection measures.
Support the implementation and operation of Business Continuity and Disaster Recovery frameworks.
Prepare reports and recommendations for internal and external stakeholders, including regulators and group entities.
Undertake additional responsibilities related to the role as required.

Required Qualifications

Bachelor’s degree in Information Technology, Information Systems, Business Administration, Economics, Finance, Management, or another related field.
Strong technical knowledge in Information Security and Business Continuity / Disaster Recovery frameworks.
Working knowledge of standards and frameworks such as ISO27001, ISO22301, NIST, CoBIT, ITIL, and PCI.
Experience in information security policy development, implementation, and compliance management.
Strong organisational, analytical, and problem-solving skills.
Excellent communication and stakeholder management abilities.
Ability to work collaboratively across multiple departments and levels of the organisation.
Advanced command of the English language, both written and verbal.
Advanced knowledge of Microsoft Office tools, including Excel, Access, and PowerPoint.

Additional Qualifications (considered an advantage)

Master’s degree in Cyber Security, Information Security, or Information Systems Management.
Professional certifications such as CISSP or other information security certifications.
Experience in security awareness training and educational program development.
Experience in drafting reports for regulators and external stakeholders.

Benefits

Provident fund 7%
13th
Medical
Flexible hours