Chief Information Security Officer (CISO) — Insurance & Investments

Job Summary The Chief Information Security Officer (CISO) is the executive responsible for protecting the organization's information, technology infrastructure, applications, data, and digital services from cyber threats and security risks. Within Insurance & Investments, the CISO leads enterprise cybersecurity, information security governance, cyber risk management, security architecture, incident response, regulatory compliance, identity and access management, third-party security, and business continuity/cyber resilience. Key Responsibilities Develop and execute the enterprise cybersecurity and information security strategy. Establish information security policies, standards, controls, and governance frameworks. Lead enterprise-wide cybersecurity risk management. Protect sensitive customer, financial, investment, policyholder, employee, and corporate data. Oversee: Security Operations (SOC) Threat Detection & Response Incident Response Security Architecture Vulnerability Management Penetration Testing Identity & Access Management Endpoint Security Network Security Cloud Security Application Security Data Security Establish and manage cyber incident response and crisis-management processes. Lead security monitoring, threat intelligence, vulnerability assessment, and security testing. Develop cybersecurity controls across cloud, on-premise, applications, APIs, and digital platforms. Implement and maintain Identity & Access Management (IAM), privileged access,