Chief Information Security Officer (CISO)

About the role

Freightos is seeking a Chief Information Security Officer to lead its cybersecurity strategy and protect its global freight booking platform. The CISO will ensure the confidentiality, integrity, and availability of information assets while enabling business growth and innovation.

Key responsibilities

• Develop and continuously enhance an enterprise-wide cybersecurity strategy, policies, standards, and governance framework.
• Lead the information security program, identifying, assessing, and managing cyber risks.
• Oversee security operations including threat monitoring, vulnerability management, incident response, and remediation.
• Direct incident response, disaster recovery, and business continuity planning.
• Establish security architecture and best practices across cloud, network, endpoint, application, and data environments.
• Ensure compliance with laws, regulations, contractual obligations, and industry standards; support audits.
• Develop security policies, procedures, and awareness programs to foster a strong cybersecurity culture.
• Advise executive leadership and the Board on strategy, emerging threats, risk posture, and investment priorities.
• Lead, mentor, and develop the information security team.
• Manage cybersecurity budgets, evaluate emerging technologies, and recommend investments.
• Oversee identity and access management, data protection, encryption, and privileged access controls.

Required profile

• Proven senior leadership experience in information security within a technology‑focused organization.
• Strong track record of building and executing security strategies that align with business objectives.
• Excellent communication skills to influence executive stakeholders and the Board.
• Ability to mentor and develop security professionals.

Required skills

• Cloud security
• Network security
• Endpoint security
• Application security
• Data security
• Incident response
• Vulnerability management
• Risk assessment
• Security governance
• Identity and access management
• Encryption
• Privileged access management