[Hiring] Virtual CISO / ISO (Chief Information Security Officer / Information Security Officer) @Fullstream Business Services

Role Description

Information Security Governance, Risk & Compliance Lead

• Establish and maintain an enterprise information security governance framework aligned to the prospective client's business objectives, risk appetite, and regulatory requirements.
• Develop, maintain, and enhance information security policies, standards, control frameworks, and governance processes aligned to recognised frameworks such as ISO/IEC 27001, NIST, and CIS Controls.
• Conduct information security risk assessments, manage the security risk register, oversee risk treatment activities, and support internal, external, and regulatory audits.
• Lead third-party and vendor security risk assessments, particularly for outsourced and technology-enabled services.
• Design, implement, and maintain an Information Security Management System (ISMS), ensuring integration with broader risk management and governance structures, while supporting certification and continuous improvement initiatives.
• Establish and oversee security operations governance, including incident response, cyber resilience, disaster recovery, and business continuity security requirements.
• Monitor and report on key security, risk, compliance, and operational metrics, providing regular updates and strategic recommendations to executive management and governance forums.
• Drive security awareness, training, and capability-building initiatives to promote a strong security culture and strengthen internal competencies.
• Advise senior stakeholders on information security strategy, investment priorities, and risk-based decision-making, while representing the prospective client in engagements with auditors, regulators, and key third parties.

Company Description