Windmill is hiring a
Chief Information Security Officer in Worldwide

Summary

The CISO at Windmill Digital will guide information security and data privacy initiatives, fortifying the cybersecurity posture of the company. They will design a holistic security program, manage threats, communicate with stakeholders, and have 5 to 8 years of experience in information security management.

Requirements

• 5 to 8 years of proven information security management experience
• Bachelor’s degree in Computer Science, Cybersecurity, or related fields
• Expertise in compliance, especially in frameworks such as COBIT, ITIL, ISO27001/2, NIST, and SOC2
• Hands-on experience in security assessment, cloud architecture, threat modeling, and policy drafting
• In-depth comprehension of Secure SDLC, DevSecOps, or security automation
• Ability to communicate effectively with external Data Privacy and Info Sec representatives
• Knowledge of key legislations like HIPAA, SOX, PCI, and GDPR

Responsibilities

• Design and develop a holistic information security and data privacy program
• Formulate best practices and set security standards
• Spearhead security assessment processes, including penetration testing, vulnerability management, and secure software development
• Expand security tooling and automation efforts across the organization
• Proactively spot security issues and threats
• Steer compliance endeavors, including external audits, regulatory compliance initiatives, and overarching security evaluations
• Convey infosec and data privacy operational goals to stakeholders
• Engage with outside stakeholders, encompassing customers, partners, compliance bodies, and other legal/regulatory authorities

Preferred Qualifications

Certifications like CISSP and/or CISA are preferred

Benefits

• A flexible work culture, emphasizing autonomy over when and where you work
• Competitive remuneration and perks
• An inclusive environment fostering diversity and international collaboration
• Engaging tasks with opportunities for career growth
• Periodic performance reviews, synchronized with promotional cycles