Chief Information Security Officer

MFI (Bermuda) Limited is an entity linked to mF International Limited (Nasdaq: MFI). As part of our ongoing expansion, we are seeking a visionary and strategic Chief Information Security Officer (CISO) to lead our cybersecurity strategy and operations. As the highest-ranking security executive, you will be responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected.

Responsibilities

Serve as the primary security advisor to the executive leadership team and the Board of Directors.Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program. Provide strategic risk guidance for IT projects, including the evaluation and recommendation of technical controls.Oversee the design and implementation of secure network architecture and infrastructure. Manage the day-to-day operations of the security team, including threat monitoring, incident response, and vulnerability management.Direct the development and execution of disaster recovery and business continuity plans (DR/BCP). Evaluate, select, and implement security technologies (e.g., SIEM, IAM, EDR, Firewalls) to enhance the organization's defense posture. Lead the response to security incidents and data breaches, including forensic investigations and post-mortem analysis.Conduct regular security risk assessments and audits to identify vulnerabilities and ensure compliance with relevant regulations.Develop and maintain corporate security policies, standards, and procedures. Manage relationships with external auditors, regulators, and law enforcement regarding security matters.Develop and manage the annual information security budget. Ensure cost-effective investment in security tools and resources.

Qualifications

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field (Master’s degree preferred).10+ years of experience in information security or IT risk management, with at least 5 years in a senior leadership role.Proven track record of building and managing a comprehensive security program in a complex organization.Strong knowledge of cloud security (AWS, Azure, GCP) and SaaS environments. Expertise in incident response, threat hunting, and vulnerability management. Familiarity with privacy laws and data protection regulations.Experience reporting to the Board of Directors or C-level executives. Exceptional ability to translate complex technical concepts into business terms for non-technical stakeholders.