Director of Cybersecurity and Privacy Risk Advisor

About the Company

Prestigious international law firm

Industry Law Practice

Type Privately Held

About the Role

The Company is in search of a Director, Cybersecurity and Privacy Risk Advisor to spearhead the advancement of its Information Security Governance and Risk functions. The successful candidate will be responsible for the creation, renewal, and maintenance of all relevant policies, standards, processes, and procedures in line with the organization's Information Security Policy. This role involves coordinating and prioritizing key activities, formalizing cyber risk controls, and leading the team to ensure compliance and continuous control monitoring. The Director will also be tasked with establishing a library of processes and procedures, as well as developing plans for the continuous improvement of Information Security Governance and Risk services.

Applicants must demonstrate a proven track record as thought leaders in solving complex IT-risk management issues, with a strong background in the identification, development, and oversight of cybersecurity policies and procedures. The role requires expertise in tools and technology for data analytics on cyber threats, risks, and vulnerabilities, as well as the ability to prepare and communicate effectively across the organization. A Bachelor's degree, at least 15 years' of work experience, and a minimum of 10 years of supervisory experience are essential. The ideal candidate will have a background in the Information Technology or Information Security sector, with a preference for those who have worked in a professional services or legal environment. Expert knowledge of project management best practices and a working understanding of the NIST Cybersecurity Framework and IT Service Management are also necessary.

Travel Percent Less than 10%

Functions

Information Technology