Head Of Risk and Cyber Security

Role overview

Enterprise risk management

• Design the ERM framework, risk appetite statement, and risk registers.
• Lead risk assessments, board reporting, emerging-risk mitigation, business continuity, disaster recovery, and audit support.

Cyber and information security

• Develop security strategy, policies, and controls.
• Oversee threat detection, vulnerability management, incident response, penetration testing, regulatory compliance, and security awareness training.
• Lead incident response planning and serve as incident commander during security events.

Leadership and governance

• Build and develop the risk and security team.
• Report risk and security posture to executive leadership and the board or risk committee.
• Manage regulators, auditors, external security partners, budget, tooling, and roadmap.

Qualifications

• Bachelor’s degree in information security, risk management, computer science, or a related field; a master’s degree is preferred.
• At least 10 years of risk management and/or cybersecurity experience, with at least 5 years in leadership.
• Relevant certification such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Knowledge of relevant regulatory frameworks and experience building or scaling risk and security programs.
• Strong stakeholder management, board-level communication, and fluent English skills.

Benefits

• Competitive compensation may include bonuses and potential shares.
• Professional development, regular training, and an annual learning stipend are offered.
• The role provides autonomy, mentoring, and challenging goals in a hyper-growth environment.