About the Role
The Chief Information Security Officer (CISO) is responsible for providing strategic leadership and direction for the organization's information and cybersecurity program. The role is accountable for safeguarding CSC's information assets, digital infrastructure, applications, and data against evolving cyber threats while ensuring compliance with applicable regulatory, legal, and industry standards.
The CISO will establish and drive the enterprise information security strategy, strengthen cyber resilience, oversee security operations, and foster a security-first culture across the organization. As a key member of the technology leadership team, the CISO will work closely with business leaders, regulators, and external stakeholders to align cybersecurity initiatives with organizational objectives.
Key Responsibilities
1. Information Security Strategy & Governance
- Develop and execute the organization's enterprise information security strategy and roadmap.
- Establish and maintain information security governance frameworks, policies, standards, and procedures.
- Align cybersecurity initiatives with business objectives and enterprise risk management practices.
- Present cybersecurity posture, risk assessments, and strategic recommendations to executive leadership.
2. Cyber Risk Management
- Identify, assess, monitor, and mitigate cybersecurity risks across the enterprise.
- Lead enterprise-wide risk assessments, vulnerability management, and threat modelling initiatives.
- Implement appropriate security controls to reduce business and operational risks.
- Oversee third-party, vendor, and supply chain security risk management.
3. Security Operations & Incident Management
- Lead Security Operations Centre (SOC) functions, security monitoring, and threat intelligence activities.
- Direct cybersecurity incident response, forensic investigations, and breach management.
- Ensure timely detection, containment, recovery, and reporting of security incidents.
- Drive continuous improvement through post-incident reviews and lessons learned.
4. Compliance, Audit & Regulatory Management
- Ensure compliance with applicable information security laws, regulations, and industry standards.
- Lead internal and external security audits and certification initiatives.
- Coordinate with Legal, Compliance, Privacy, and Audit teams on security governance.
- Support regulatory inspections, certifications, and compliance reporting requirements.
5. Security Architecture & Technology
- Provide strategic oversight for security architecture across on-premise, cloud, network, and application environments.
- Evaluate, recommend, and govern implementation of security technologies and solutions.
- Promote secure system design, secure software development (DevSecOps), and Zero Trust security architecture.
- Ensure security considerations are integrated into enterprise technology initiatives.
6. Leadership & People Management
- Build, mentor, and lead a high-performing information security team.
- Define performance objectives, succession planning, and capability development initiatives.
- Manage departmental budgets, resource planning, and vendor relationships.
- Promote cybersecurity awareness and accountability throughout the organization.
7. Business Collaboration & Stakeholder Management
- Serve as the organization's principal advisor on cybersecurity matters.
- Translate technical security risks into business impacts and strategic recommendations.
- Collaborate with Technology, Engineering, HR, Legal, Procurement, and Business teams to embed security into business processes.
- Lead enterprise-wide security awareness, training, and cyber resilience programs.