Chief Information Security Officer

• We are looking for a hybrid powerhouse: a Chief Information Security Officer
• In this role, you will be the guardian of Freightos’ trust
• You will shape and drive our cybersecurity vision, ensuring our platform, products, people, and data remain secure while enabling innovation and business growth
• You are the kind of leader who builds security into everything, protecting every digital doorway without slowing down the movement of global trade
• From strategic risk management and governance to incident response and security engineering, you’ll foster a culture where security is a business enabler, not a roadblock
• Develop, implement, and continuously enhance Freightos’ enterprise-wide cybersecurity strategy, policies, standards, and governance framework
• Lead Freightos information security program to protect the confidentiality, integrity, and availability of information assets
• Identify, assess, and manage cybersecurity risks, ensuring appropriate controls are implemented to mitigate business and technology risks
• Oversee security operations, including threat monitoring, vulnerability management, incident response, and remediation activities
• Direct the development and execution of incident response, disaster recovery, and business continuity plans
• Establish and maintain security architecture and best practices across cloud infrastructure, network, endpoint, application, and data environments
• Ensure compliance with applicable laws, regulations, contractual obligations, and industry standards, and support internal and external audits
• Develop and maintain security policies, procedures, and awareness programs that promote a strong culture of cybersecurity across the organization
• Advise executive leadership and the Board of Directors on cybersecurity strategy, emerging threats, risk posture, and investment priorities
• Lead and mentor the information security team, fostering professional development, accountability, and operational excellence
• Manage cybersecurity budgets, evaluate emerging technologies, and recommend investments that improve the organization’s security capabilities
• Oversee identity and access management, data protection, encryption, and privileged access controls
• Collaborate with SRE, IT, R&D, legal and business leaders to integrate security into organizational processes and strategic initiatives
• Manage third-party and vendor cybersecurity risk assessments, ensuring external partners meet organizational security requirements
• Monitor the evolving threat landscape and implement proactive measures to address emerging cybersecurity risks and improve the organization’s overall security maturity
• Reports to: CEO

Benefits

• Build something that changes the world
• Friendly, get ship done environment
• Work alongside outstanding talents
• Team building events (that don’t suck)
• ESOP packages

• Strong understanding of cybersecurity frameworks such as NIST CSF, ISO/IEC 27001, CIS Controls, and COBIT
• Experience with cloud security (AWS and Google Cloud)
• 10+ years of progressive experience in information security or cybersecurity
• Experience presenting cybersecurity strategy to executive leadership and Boards of Directors
• Strong understanding of risk management and regulatory compliance
• Experience managing security operations, incident response, vulnerability management, identity management, and governance
• 5+ years of leadership experience managing security teams and programs
• Excellent leadership, communication, and stakeholder management skills
• ReBachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field
• GIAC certifications
• CISA
• CCSP
• CISM
• CRISC
• CISSP
• Professional certifications such as:
• Master’s degree in Cybersecurity, Information Technology, Business Administration, or related discipline