Chief Information Security Officer

The CISO will lead the global information security program at DNEG, implementing strategies that safeguard sensitive data and ensure compliance with industry standards. You will design and steer cybersecurity frameworks that align with business objectives while fostering a security-conscious organisational culture. This critical leadership position ensures our company remains resilient against evolving cyber threats and ensures information confidentiality, integrity, and availability.

Key Responsibilities

Leadership and Team Management:

1. Build, lead, and mentor a high-performing global cybersecurity team, with a focus on fostering talent and collaboration across multiple regions, including India.
2. Champion a culture of security awareness across all levels of the organisation, integrating security as a core aspect of the business's values.
3. Ensure security strategies align with broader business objectives, partnering closely with senior leadership, including the CEO and CTO.

Strategy Development and Execution:

1. Design, implement, and continuously evolve a comprehensive global information security strategy.
2. Apply a holistic approach to security management, aligning cybersecurity initiatives with DNEG's business goals, including creative processes and client relationships.
3. Lead the development and maturation of the Information Security Management System (ISMS), ensuring alignment with industry best practices like the Motion Picture Association's Trusted Partner Network (TPN).

Risk Management and Compliance:

1. Develop and execute risk management strategies, identifying and mitigating potential threats while ensuring compliance with regulations like GDPR, NIS, ISO 27001, and SOC 2.
2. Create and maintain Third Party Risk Management (TPRM) processes, ensuring intellectual property protection in accordance with client contractual requirements.
3. Implement policies that address global privacy mandates and ensure business resilience, including those adapted for hybrid and remote working models.

Incident Response and Crisis Management:

1. Architect and lead a robust incident response plan to handle security breaches effectively.
2. Act as the primary point of contact during security incidents, overseeing investigations, remediation efforts, and communication with key stakeholders.

Security Architecture and Operations:

1. Oversee the development of a resilient security architecture, ensuring the protection of critical assets and IP.
2. Integrate cutting-edge security technologies (e.g., SIEM, EDR/XDR, firewalls, IDS/IPS) and implement Zero Trust frameworks to enhance overall security posture.
3. Lead the selection and implementation of security solutions that align with DNEG's operational requirements, including cloud security management and development lifecycle integration.

Collaboration and Reporting:

1. Provide regular security updates and risk assessments to executive leadership, offering actionable insights on improving security.
2. Collaborate with IT and legal teams to ensure seamless integration of security protocols into business processes.
3. Act as a liaison with external regulatory bodies, auditors, and clients to ensure adherence to security and compliance standards.

Key Qualifications:

1. 10+ years of experience in information security leadership, including proven success as a CISO or senior security executive.
2. Comprehensive understanding of information security frameworks such as NIST, ISO 27001, and TPN.
3. Expertise in risk management, cybersecurity governance, and incident response, with hands-on experience in advanced security technologies.
4. Proven track record of balancing security and business priorities, ensuring pragmatic solutions that drive operational efficiency and security resilience.
5. Strong leadership skills, with experience managing global, cross-functional teams, including those in India and other key regions.
6. Ability to communicate complex technical security topics to non-technical stakeholders, with a focus on gaining executive buy-in for strategic security initiatives.