Head of Enterprise and Cyber Security

Insights from the team
As Head of Enterprise and Cyber security you will be a part of the data and digital organization at Zensact and report directly to our CDO. The enterprise and cyber security team works closely with the other teams within data and digital (Data management and innovation and Digital/Enterprise IT) as well as other parts of the business to make sure that the company and its assets are protected.

Main responsibilities
The Head of Enterprise and Cyber security is responsible for executing information security programs which include security governance, risk & compliance (GRC) policies, standards, leading and coordinating security processes and procedures meant to protect the information assets of our organization. You will be responsible for both enterprise and product security.

Your responsibility comprises:
o Direct and approve the design of security systems;
o Ensure that disaster recovery and business continuity plans are in place and tested;
o Review and approve security policies, controls and cyber incident response planning;
o Approve identity and access policies;
o Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities;
o Maintain a current understanding the IT threat landscape for the industry;
o Ensure compliance with the changing laws and applicable regulations;
o Translate that knowledge to identification of risks and actionable plans to protect the business;
o Schedule periodic security audits;
o Oversee identity and access management;
o Make sure that cyber security policies and procedures are communicated to all personnel and that compliance is enforced;
o Constantly update the cyber security strategy to leverage new technology and threat information;
o Brief the executive team on status and risks, including taking the role of champion for the overall strategy and necessary budget;
o Communicate best practices and risks to all parts of the business, outside IT.

Qualifications
To be successful in this role you should have extensive experience within the security area and should be able to teach and guide others. You need to be a team player and a leader that can inspire others. Since the security team is a small team you should be thrilled to also do dig into some operational work yourself. In addition we believe you meet the following requirements:
10 years of experience of working with Information and Cyber Security, last 5 years in a leading position.
M.Sc. or B.Sc. in a related field such as Cyber Security, IT, Computer Science etc.
Certified within CISSP, SSCP, CISA, CISM
Knowledge about NIST, CIS20, ISO27001,
Experience from implementing policies
Advantageous with experience from Rapid7 and Darktrace
Insights in applicable laws and regulations.
Enjoy working in an international organization with people from different cultures
Share our Zenseact values; Seek and share knowledge, take ownership, push boundaries and grow trust.... with people at heart