首席信息安全官（CISO）
Chief Information Security Officer (CISO)
Testronic 是游戏和娱乐行业质量保证和技术服务领域的全球领导者。我们与全球领先的游戏玩家开发商和发行商合作，提供功能测试 QA、合规性测试 QA、本地化测试 QA、兼容性测试 QA 以及其他专业服务。
我们在欧洲、亚洲和北美拥有多元化的团队，我们营造了一个包容、协作的文化，其核心价值为：我们深怀关怀、对质量充满热情、信任团结、以责任为荣。无论您是刚刚开始职业生涯，还是寻找新的挑战，Testronic 都为您提供学习、成长和产生有意义影响的机会。
职位简介
我们正在寻找一位首席信息安全官（CISO），在全球范围内领导 Testronic 的信息安全和网络安全计划。CISO 将制定并实施信息安全战略，监督企业安全风险和治理，领导信息安全职能，并就网络安全、韧性及合规性向高层管理及董事会提供建议。
职责：
信息安全战略
· 制定并实施与业务目标、技术计划和风险偏好一致的全球信息安全战略。
· 将安全目标转化为可衡量的项目、能力和年度重点。
· 监控安全环境并根据新兴威胁、技术和法规要求调整战略。
治理与风险管理
· 负责全球信息安全治理框架、政策和风险管理流程。
· 确保重大安全风险有明确的所有者、处理计划和适当的升级机制。
· 监督信息安全管理系统，并在组织内推动安全责任意识。
董事会与高层管理
· 向董事会和高层管理者定期汇报网络风险、安全态势、事件、合规性和韧性状况。
· 向高管层提供重大安全风险的建议，并支持做出明智的商业决策。
· 用清晰的商业和财务术语传达复杂的安全议题。
安全与事件管理
· 作为重大信息安全事件的高级上报点。
· 领导或支持高管层对重大网络安全事件的响应，与 IT、法务、隐私、公关和业务团队合作。
· 确保事件响应演练、经验总结和整改活动有效执行。
查看英文原文
Testronic is a global leader in Quality Assurance and technology services for the games and entertainment industries. We work with some of the world's leading game developers and publishers, providing Functional QA, Compliance QA, Localization QA, Compatibility QA, and other specialized services.
With diverse teams across Europe, Asia, and North America, we foster an inclusive, collaborative culture built on four core values: We Care Deeply, Passion for Quality, Trust in Unity, and Pride in Ownership. Whether you're starting your career or looking for your next challenge, Testronic offers opportunities to learn, grow, and make a meaningful impact.
About the Role
We are looking for a Chief Information Security Officer (CISO) to lead Testronic’s information and cyber security programme at a global level. The CISO will define and deliver the security strategy, oversee enterprise security risk and governance, lead the Information Security function, and provide senior leadership and Board-level advice on cyber security, resilience and compliance.
Responsibilities:
Information Security Strategy
· Develop and deliver Testronic’s global information security strategy, aligned with business objectives, technology plans and risk appetite.
· Translate security objectives into measurable programmes, capabilities and annual priorities.
· Monitor the security landscape and adapt the strategy to emerging threats, technology and regulatory requirements.
Governance & Risk Management
· Own the global information security governance framework, policies and risk management processes.
· Ensure material security risks have clear ownership, treatment plans and appropriate escalation.
· Oversee the Information Security Management System and promote security accountability across the organisation.
Board & Senior Leadership
· Provide clear, regular reporting to the Board and senior leadership on cyber risk, security posture, incidents, compliance and resilience.
· Advise executives on significant security risks and support informed business decisions.
· Communicate complex security topics in clear business and financial terms.
Security & Incident Management
· Act as the senior escalation point for significant information security incidents.
· Lead or support executive-level response to major cyber incidents, working with IT, Legal, Privacy, Communications and business teams.
· Ensure incident response exercises, lessons learned and remediation activities are effectively managed.
Security Programme & Assurance
· Oversee security programmes covering corporate technology, cloud, applications, products and third parties.
· Provide oversight of security architecture, vulnerabilities, penetration testing, control testing and independent assurance.
· Monitor the effectiveness of internal and outsourced security services and ensure key security improvements are delivered.
Compliance & External Stakeholders
· Oversee information security requirements arising from legislation, regulations, customer contracts and recognised standards.
· Support ISO 27001 and other relevant certification and assurance programmes.
· Represent Testronic in significant security matters involving clients, auditors, regulators, insurers and other external stakeholders.
Leadership & Business Partnership
· Lead, develop and build a capable global Information Security function.
· Work closely with IT, Legal, HR, Facilities, Commercial, QA and other departments to embed security into business and technology decisions.
· Manage the security budget, strategic suppliers and major security investments.
· Ensure security risks are considered in acquisitions, outsourcing and major organisational or technology changes.
Requirements
· Significant senior-level experience in information and cyber security.
· Experience developing and implementing an enterprise security strategy.
· Experience advising Boards, executives or senior governance committees.
· Strong experience in enterprise security risk management and governance.
· Experience leading security programmes across complex technology environments.
· Experience managing significant cyber security incidents or crisis situations.
· Experience leading and developing multidisciplinary security teams.
· Strong understanding of security governance, architecture, operations, assurance and operational resilience.
· Knowledge of cloud, infrastructure, identity, application and product security.
· Experience with security frameworks, ISO 27001 and third-party risk.
· Strong stakeholder, programme, budget and supplier management skills.
· Knowledge of relevant UK legal, regulatory and contractual requirements.
GOOD TO HAVE: CISSP, CISM, CCISO, ISO/IEC 27001 Lead Implementer/Lead Auditor, CRISC or equivalent qualifications.
Originally posted on Himalayas