Head of Cybersecurity

JLA Group is committed to maintaining a secure and compliant business environment. As part of this ongoing commitment, we are seeking an experienced Information Security professional to lead our information security strategy and program.

• Develop and implement a comprehensive information security strategy, including policies, procedures, and tools to protect enterprise communications, systems, and assets from internal and external threats.
• Work closely with business units to facilitate risk assessment and risk management processes.
• Develop and enhance an information security management framework and associated policies.
• Ensure compliance with relevant security policies, standards, regulations, and laws.
• Oversee the approval, training, and dissemination of security policies and practices.
• Take responsibility for statutory attestations and achieving key information security accreditations.
• Develop and manage the cross-functional information security incident response team and ensure efficient and effective incident management processes.
• Monitor the security and compliance environment continuously, managing third-party vendors and monitoring tools.

• Proven ability to develop and execute a comprehensive information security strategy.
• Proven experience in developing and managing security policies and procedures.
• Experience with cloud security, particularly Azure and hybrid Azure environments.
• Strong working knowledge of Azure Entra and Microsoft Security and Compliance tools.
• In-depth knowledge of information security frameworks, such as ISO 27001 and NIST.
• Strong understanding of relevant legal and regulatory requirements, including GDPR and PCI-DSS.
• Excellent leadership, communication, and project management skills.
• Ability to handle high-stress situations and make sound decisions under pressure.

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Minimum of 10 years of experience in a combination of risk management, information security, and IT roles.
• At least 3 years in a senior information security role.

The ideal candidate will have one or more of the following certifications: CISSP, CISM, or CRISC. Other relevant certifications are a plus.