Chief Information Security Officer (CISO)

Sinch is a leading global CPaaS (Communications Platform as a Service) providing cloud-based Messaging, Email, Voice, and Application services to major brands, including many leading tech companies, worldwide.

We are now looking for a global CISO whose mission is to protect Sinch's information and systems.

In this role you will lead and manage our security strategy, roadmap, initiatives, and coordinate with related activities across all entities within Sinch. To be successful, you will work closely with the global group leadership, representing strategy, human resources, finance, product, engineering, business IT, data, legal/privacy teams, and regional presidents (who lead Sales, Field Marketing, and Customer Success).

We therefore seek an experienced CISO that with expertly define our security strategies, update our security roadmap, coordinate its execution as part of Sinch’s program portfolio, and develop and lead a team of highly skilled security leaders and professionals. 

Reporting to our Chief Data and Transformation Officer, you will lead and manage a global security team in defining our security strategy, roadmap, and initiatives. You will coordinate these with related activities across all Sinch entities, identify and manage risks, govern compliance, define key security architectures, and oversee critical external services. Furthermore, you will develop and lead a team of highly skilled security professionals and be responsible for reporting all aspects of security risks, status, and initiatives to the Sinch Group Leadership team and Board of Directors regularly.

 Being a global company with teammates located in many regions, this role is hybrid in nature using remote ways of working.  It is expected that some travel will be required to build trust and rapport with your security team and leaders across the company, but qualified candidates will be effective working with dispersed teams.

Main Responsibilities

• Define, manage, and progress the security risk program by developing the strategy, roadmap, and initiatives required to mitigate the evolving security risks using industry best practices
• Protect Sinch from cyber-attack through effective cyber security intelligence and operations, including preparation, prevention, detection of potential threat actor attack along with response and recovery
• Collaborate with group leadership to identify and mitigate information security concerns within the product development lifecycle through consistent and comprehensive testing processes
• Create a “security by design” culture that considers security in all relevant designs, processes, and decisions and use regular training to
• Perform regular, ongoing and rigorous reviews of personnel resources to ensure that project plans are executed effectively, offering alternative solutions that still achieve desired outcomes when necessary
• Lead the Incident Response Team and coordinate with group leadership to contain, investigate (including Root Cause Analysis), mitigate, and prevent future computer security incidents or breaches
• Refine group level security policies and procedures (ISMS)
• Define and provide ongoing tracking of group wide security KPIs for governance and continuous improvement
• Provide quarterly security report for the leadership team and board of directors  
• Drive cost efficiency by consolidating policies, tooling and services that are not unique to product lines
• Budget management for Sinch Information Security
• Flexibility to work across time zones and willingness to travel up to 25% (sometimes internationally) as needed

Requirements

• Degree in Information Security, Software Engineering, Computer Science, Information Systems, or equivalent work experience and training
• At least 10 years' experience leading information security teams, with preference given to global experience
• At least 3 years' experience with security testing within the product development lifecycle, preferably with automation best practices related to Continuous Development/Continuous Integration pipelines
• Relevant certifications such as CISA, CISSP
• In depth knowledge about security standards and regulations such as ISO27001, SOC2, NIST CSF
• Deep understanding of audit, assessment and RFx processes with external parties
• At least 3 years working experience with global data privacy laws and regulations
• Solid understanding of cloud computing, IP networking, software development and operations
• Project management skills to organize and drive cross functional initiatives
• Experience with contract and vendor negotiations, including third party management and vetting
• Highest level of personal integrity and accountability
• Preference for working experience in the technical industry providing software or networking products

Personal Qualities

• Great leader of leaders, listens to learn and adds independent thinking to develop informed views
• Provides excellent clarity and structure in both verbal and written communications, delivering concise and easily understood guidelines, polices and documentation for the entire global organization
• Loves facilitating discussion of complex matters, but drives conclusion and agreement across stakeholders
• Genuine interest in information and cyber security and desire to build a great security posture
• Is self-reflective, actively seeking to understand areas for development and improvement
• Always looks for the objective truth to make informed decisions vs committing to desired outcomes
• Curiously engages with all areas of discipline and professional levels
• Highly adaptable, especially when scope and prerequisites change, or new risks materialize

Benefits

• STAY HEALTHY: We offer comprehensive market competitive medical, dental, and vision plans. A variety of supplemental plans are also provided to meet your individual needs including access to telehealth for all participants.
• CARE FOR YOURSELF: Take advantage of our free virtual counseling resources through our global Employee Assistance Program. Your mental health is as important as your physical health.
• SECURE YOUR FUTURE: Plan for your future with our Roth and Pre-tax 401(k) options including an employer match for all participants.
• TAKE A BREAK: Enjoy a generous paid time off program. We value balance and understand that performance at work requires time to rest at home and/or rejuvenate on vacation.
• PUT FAMILY FIRST: We know that families can be built in a variety of ways; therefore, we offer paid parental leave and family planning support.
• WORK WHEREVER: Our flexible remote work offerings allow you to work wherever you’re the most productive and successful. It’s what you do, not where you work, that matters.
• MAKE AN IMPACT: Support betterment in your community and beyond by taking paid time off to support a volunteer program of your choice