Chief Information Security Officer

Job Description:

·       Overseeing cybersecurity governance, risk, and compliance (“GRC”) for the Company enterprise;

·       Working with the G42 Office of Compliance and Technology Risk to implement cybersecurity controls responsive to G42 security and privacy requirements;

·       Reporting on progress against industry standard Key Risk and Performance Indicators cybersecurity objectives to the Company Chief Legal Officer and G42 Office of Compliance and Technology Risk;

·       Providing independent advice and oversight to technical implementation teams;

·       Developing and implementing cybersecurity policies and procedures;

·       Providing independent audit and assurance of cybersecurity controls across Company systems and networks;

·       Leading the development of the Global Data Privacy program;

·       Overseeing the Security Operations Center (SOC);

·       Overseeing the Identity and Access Management (IAM) program:

·       Overseeing the incident response and forensic investigation process; and

·       Overseeing the enhancement of the Security Development Lifecycle (DevSecOps);

·       Building a cybersecurity risk measurements program.

Job Requirements:

·       15-20 years of experience in cybersecurity leadership roles with increasing responsibility and span of control;

·       Bachelor’s Degree

·       Industry-leading cybersecurity certifications (CISSP, CISM, CISA, CASP+, Security+);

·       Experience in designing and implementing cybersecurity programs in a regulated industry;

·       Experience working in a fast-paced startup, preferable in software development and/or artificial intelligence;

·       Comprehensive understanding of cloud technologies with specific knowledge in Microsoft Azure and Open Stack;

·       Working understanding of AI models and their development and use (training and inference);

·       Working understanding of High-Performance Computing (“HPC”)

·       Experience developing and implementing cybersecurity policies and procedures;

·       Experience conducting independent audits and assurance of cybersecurity controls;

·       Experience working with development teams and securing the development process (DevSecOps); and

·       Experience with Digital Forensics and Incident Response (“DFIR”) best practices.