




Job Summary: We are seeking a vCISO to lead, strengthen, and oversee the organization’s cybersecurity strategy, integrating technical and regulatory knowledge. Key Highlights: 1. Leadership in cybersecurity and program management. 2. Strategic vision and technical expertise in cybersecurity. 3. Development and execution of cybersecurity strategies. We are looking for a **vCISO (Virtual Chief Information Security Officer)** to join our GRC team in **Colombia**. If you have experience spanning security program management and technical domains, this is your opportunity to step into such a role. **What will be your mission?** As vCISO, you will be responsible for leading, strengthening, and overseeing the organization’s cybersecurity strategy—providing specialized leadership, strategic vision, and technical expertise while integrating technical and regulatory knowledge. **What are we looking for?** * Minimum 5 years of proven experience in cybersecurity leadership and security program management. * In-depth knowledge of cybersecurity, risk management, compliance, and regulatory frameworks. * Desired certifications include: ISC2 CISSP, Lead Auditor, ISACA CISM / CISA, GIAC, or other technical security certifications. * Strategic skills, executive communication abilities, and capacity to collaborate across multiple departments. * Availability to work in a hybrid format from Colombia, preferably Medellín or Bogotá. **What challenges await you?** * Develop and execute a cybersecurity strategy aligned with business objectives. * Assess the current security posture, conduct risk analyses, and propose mitigation plans. * Define security policies, standards, and procedures, considering frameworks such as ISO 27001, NIST CSF, or local regulations (Colombia). * Supervise and support security incident management and response activities. * Lead cybersecurity awareness programs across all organizational levels. * Advise on secure architectures, technical controls, and critical IT projects. * Manage and coordinate audits, third-party assessments, and penetration tests. * Guide the implementation of security solutions and prioritize strategic investments. * Provide periodic reporting to senior management or the executive committee on risks, metrics, and progress. * Collaborate closely with the Iberia team. Do you think you meet our requirements? **Apply now** *We positively value applications from individuals holding a disability certificate of 33% or higher, in compliance with current legislation—the General Law on the Rights of Persons with Disabilities and their Social Inclusion (LGD). Likewise, aiming to reverse the prevailing trend in our sector and foster balance within our team, we encourage potential female candidates to apply for this vacancy so that we may consider the broadest possible range of applications from this group.*


