Chief Information Security Officer (CISO)

Job title: Chief Information Security Officer (CISO)

About the Role This role leads the company's entire cybersecurity and information security strategy, protecting customer data, digital platforms, and critical technology ecosystems. You will strengthen security maturity, oversee governance, compliance, risk management, monitoring and incident response, while enabling secure innovation and digital transformation. You will work closely with Technology, Product, Digital, Loyalty, Data and Compliance to ensure security is embedded by design across processes and platforms.

What You'll Do

• Define and implement the corporate cybersecurity and information security strategy aligned to business objectives.
• Lead the development and implementation of the Information Security Management System (ISMS).
• Design and execute the roadmap toward ISO/IEC 27001 certification.
• Protect the confidentiality, integrity, and availability of information assets, including customer data, payments and loyalty data.
• Oversee monitoring capabilities, vulnerability management and incident response.
• Lead business continuity and disaster recovery initiatives related to information security.
• Ensure compliance with applicable standards and regulatory frameworks such as ISO 27001, NIST, PCI DSS and security best practices.
• Strengthen cybersecurity culture and awareness within the organization.
• Manage cybersecurity providers, tools and partners ensuring SLA and standard compliance.
• Collaborate with Audit and Risk to ensure effectiveness of controls and ITGCs.
• Act as strategic advisor to executive leadership on cyber risk, data protection and secure digital transformation.
• Lead and develop the Cybersecurity and Information Security team.

What We're Looking For

• +15 years of experience in Information Security, Cybersecurity, Technology Risk, or enterprise technology environments.
• Experience leading corporate cybersecurity and information security programs.
• Experience implementing and administering ISMS frameworks (ISO/IEC 27001, NIST, PCI DSS, etc.).
• Experience in incident response, risk management and business continuity.
• Experience in digital/ecommerce, customer data or high-volume transactional platforms.
• Strong knowledge of IT governance, compliance and technology auditing.
• Experience leading multidisciplinary teams and cross-functional projects.
• Advanced English.
• Desired experience in regulated or high-availability industries.

Nice to Have

• Optional/preferred qualifications mentioned: desirable experience in regulated or high-availability industries.

Compensation & Benefits

• Participate in a highly dynamic organization undergoing digital transformation.
• Lead strategic security initiatives with direct business and customer impact.
• Constant exposure to executive leadership and key areas of the organization.
• Collaborative, challenging, innovation-oriented work environment.
• Benefits above legal requirements.
• Opportunities for professional development and career growth.