Security at Keenfinity is not a compliance exercise. It is a business-critical function that directly affects the valuation and saleability of four Business Units. Every BU exit involves a buyer who will scrutinise Keenfinity's security posture in due diligence. Any significant finding — unpatched vulnerabilities, weak IAM controls, an ISMS that doesn't survive audit — will either reduce the sale price or delay the transaction. As CISO, the role owns that risk. The role is the security authority across the entire Keenfinity IT organisation, reporting directly to the Director IT STG (Director IT STG). The role sets the security strategy, oversee the SIEM/SOC (the SOC Lead), IAM (the IAM Lead) and ISMS (the ISMS Manager) functions, and hold sign-off authority at every divestiture phase gate for security readiness. The role is also the person who sits across the table from buyer security teams in due diligence and can defend Keenfinity's security programme with credibility. This is a senior, high-visibility role in a PE-backed environment with a defined exit horizon. The right person thrives under that constraint — they see the exits as the forcing function to prioritise ruthlessly and deliver what matters. Key Responsibilities Security strategy & governance Define and own Keenfinity's IT security strategy for the divestiture period: threat landscape assessment, security architecture principles, risk appetite definition Establish and maintain the IT security governance framework: policies, standards, exception management, risk register at the enterprise level Report security risk status monthly to Director IT STG; produce quarterly security dashboards for Triton / CFO as required Advise the Director IT STG on security implications of cost reduction initiatives — particularly vendor consolidations, license exits and cloud rightsizing decisions (FinOps Analyst interface) Divestiture security — phase gate authority Hold formal security sign-off authority at every BU divestiture phase gate: no gate advances without CISO confirmation that security separation is complete and defensible Define the security requirements checklist for each exit: network separation, IAM tenant split, data classification and handling, encryption standards, security tooling carve-out Coordinate with the Enterprise Architect to ensure security architecture is embedded in every separation blueprint from the start — not retrofitted at the end Lead security due diligence preparation for each BU sale: produce security posture documentation, penetration test summaries, ISMS certification evidence, incident history and remediation records Act as the primary security contact for buyer due diligence teams; represent Keenfinity's security programme credibly in technical and executive-level conversations Security operations oversight Provide strategic direction to the SOC Lead: SIEM platform strategy, detection coverage priorities, incident response protocols, escalation thresholds Provide strategic direction to the IAM Lead: identity governance framework, privileged access management, directory architecture — especially relevant for AD/Azure AD separation per exit Provide strategic direction to the ISMS Manager: ISO 27001 programme priorities, ISMS scope management per BU exit, certification renewal strategy Review and approve major security architectural decisions; maintain the security architecture principles document as a living standard ISMS & compliance Ensure Keenfinity's ISO 27001 ISMS remains certified and audit-ready throughout the divestiture period — including scope adjustments as each BU separates Own the security risk register at the enterprise level; chair the security risk review with the ISMS Manager and the Director IT STG quarterly Ensure regulatory compliance across all active jurisdictions (GDPR, NIS2, relevant sector requirements); flag material compliance gaps to Director IT STG