Director, Information Security (CISO)

The CISO will lead the global information security strategy for a multinational enterprise. This role is responsible for developing, implementing, and maintaining a robust cybersecurity and compliance framework aligned with international standards, regulations and business objectives.

Key Responsibilities:

• Define and execute the global information security strategy and roadmap.
• Lead risk management, incident response, and data protection programs across all regions.
• Ensure compliance with ISO 27001, NIST, CMMC, NIS, GDPR, and other regulatory frameworks.
• Oversee security governance, policies, and audits across all systems and platforms.
• Support internal and external audit requirements and remediation efforts
• Manage vulnerability assessments, incident response, threat detection, and monitoring
• Coordinate security architecture reviews for new systems and applications
• Collaborate with executive leadership to align security initiatives with business goals.
• Partner with Legal, HR, Risk, and regional leadership on privacy, compliance, and security issues
• Lead TPRM (Third Party Risk Management) framework and vendor security assessments
• Manage and mentor global security teams and coordinate with regional IT leaders.
• Evaluate and implement advanced security technologies and threat intelligence solutions.
• Report on security posture, risks, and compliance to senior management and the board.

Minimum Qualifications:

• CISO Certificate
• 10+ years of experience in Information Security, IT Compliance, or Risk Management.
• 3+ years of CISO leadership experience in a global organization.
• Proven experience implementing and managing global security frameworks and policies.
• In-depth knowledge of ISO 27001, NIST, CMMC, NIS, GDPR, and related standards.
• Strong communication and stakeholder management skills.
• Fluent in English; Hebrew and additional European languages are a plus.

Preferred:

• CISSP, CISM, or similar security certifications.
• Experience in multinational or regulated industries.