ICT Chief Information Security Officer
Tuzla
On-site 3-5 years of professional experience
Short Description
On behalf of our client, Manpower BiH is looking for a motivated professional to join their team in the role of:ICT Chief Information Security Officer
Description
Scope of positionThe Chief Information Security Officer (CISO) is responsible for defining, implementing, and overseeing the organization’s information security strategy, ensuring the protection of information assets, infrastructure, and operations against cyber threats. The role combines strategic leadership with technical expertise on security and Zero Trust architectures.Tasks and responsibilities
- Define and maintain the enterprise-wide information security strategy
- Establish and enforce security policies aligned with NIST, ISO 27001, CIS, and Zero Trust
- Act as the primary cybersecurity point of contact for executive leadership
- Govern endpoint, identity, and device security using Microsoft Intune MDM/MAM
- Oversee threat detection and response using Darktrace and CrowdStrike Falcon
- Manage secure network architectures leveraging Cato Networks (SASE)
- Lead incident response, threat hunting, and post-incident reviews
- Ensure continuous security monitoring and operational metrics
- Collaborate with IT, Cloud, Legal, and Risk teams
Requirements
- Microsoft Intune (MDM, MAM, compliance, endpoint security)
- SOC Management
- Darktrace (network behavior analytics, anomaly detection)
- CrowdStrike Falcon (EDR, threat hunting, incident response)
- Cato Networks or equivalent SASE platforms
- Cloud security and Zero Trust architectures
- Minimum 5 years of experience in the role
- Experience in senior security or leadership roles
- Proven ability to manage security incidents and cyber risk
- Strong understanding of governance, compliance, and risk management
- Strong leadership and communication skills
- Ability to translate technical risks into business impact
- Pragmatic, risk-based decision-making approach
- Nice to have: Security certifications such as CISSP, CISM, or CCSP
- Nice to have: Experience in regulated or high-risk environments
- Nice to have: Experience in CMMC Level 2 Implementation
