Role Description This full-time remote Chief Information Security Officer (CISO) role is responsible for leading the overall information security strategy and governance at Colegio Nacional de Financieros. The CISO oversees the design, implementation, and continuous improvement of security policies, standards, and controls across all systems and applications. Daily responsibilities include assessing cybersecurity risks, monitoring security operations, coordinating incident response, and ensuring regulatory and compliance requirements are met.
The role collaborates closely with executive leadership and technology teams to align security initiatives with business objectives, manage security budgets, and provide clear reporting on security posture. The CISO also drives security awareness programs, evaluates new security technologies, and leads vendor risk management related to information security.
Qualifications
Strong expertise in Information Security and Information Security Management, including developing and enforcing security policies, frameworks, and governance practices.
Proficiency in Cybersecurity operations, such as threat detection, incident response, vulnerability management, and security monitoring.
Experience with Application Security, including secure software development practices, code review, and application vulnerability assessment.
Knowledge of Business Continuity and disaster recovery planning, with the ability to design, test, and maintain continuity strategies.
Proven leadership experience in senior security roles, preferably as a CISO or equivalent, with responsibility for enterprise-wide security programs.
Familiarity with relevant regulations and standards (e.g., ISO 27001, NIST, GDPR or local data protection laws) and audit requirements.
Excellent communication and stakeholder management skills, with the ability to present complex security topics to non-technical audiences.
Demonstrated ability to work effectively in a remote environment and collaborate across distributed teams.
Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; advanced degree or relevant certifications (e.g., CISSP, CISM, CISA) are preferred.