Chief Information Security Officer
Also known as: CISO · Head of Information Security
Holds ultimate responsibility for information security, sets policy and risk appetite and accounts for the security posture to board and supervisors.
The chief information security officer directs the security function of an organisation, allocates resources and decides which risks are accepted. Unlike the security officer, this role has mandate and budget, and unlike the IT director its primary charge is risk control rather than system availability. Selection weighs technical and standards knowledge heavily, while in practice the role fails on executive presence: a CISO must be able to force an investment through and communicate with directors and supervisors during a crisis without dressing up the facts.
Competencies to measure
These are the behavioural and ability constructs in this profile. Each one shows which hrmforce questionnaire measures it.
| Competencies to measure | Target level | hrmforce instrument | Assessment method | Behavioural anchor at target level |
|---|---|---|---|---|
| Accuracy and attention to detail Competency (50-framework): Accuracy | N5 | Big Fifty, 360 Feedback | Personality questionnaire | Sets the standards for completeness and correctness, has samples checked and addresses teams on structural sloppiness. |
| integrity and dependability Competency (50-framework): Integrity | N5 | Big Fifty (Integrity Scale), 360 Feedback, Structured interview | Personality questionnaire | Sets the organisation's integrity standards, enforces them also with influential parties and explains the resulting choices publicly. |
| Discipline and keeping commitments Competency (50-framework): Discipline | N5 | Big Fifty, 15PF, 360 Feedback | Personality questionnaire | Anchors the standard for reliable follow through in working agreements and addresses anyone at any level who lets that standard slip. |
| Stress tolerance Competency (50-framework): Stress resilience | N5 | Big Fifty, 15PF, Mental Resilience (4C) | Personality questionnaire | Keeps the organisation workable in crises, takes decisions under high uncertainty and sets the standard for composed action under pressure. |
Short profile
The ten heaviest skills in this profile. The full profile with every skill, behavioural anchor and assessment method is in the download.
| T | Skill | Target level | Weight | Knockout | Assessment method |
|---|---|---|---|---|---|
| V | Problem analysis | N5 | 5 | yes | Assessment centre |
| V | Strategic thinking | N5 | 5 | no | Assessment centre |
| K | Governance and compliance | N5 | 5 | no | Knowledge test |
| V | Risk management | N5 | 5 | no | Knowledge test |
| V | Access and identity management | N5 | 5 | yes | Work sample test |
| V | Threat and risk analysis | N4 | 5 | yes | Work sample test |
| G | Accuracy and attention to detail | N5 | 4 | no | Personality questionnaire |
| G | integrity and dependability | N5 | 4 | no | Personality questionnaire |
| V | Accounting to supervisors and stakeholders | N5 | 4 | no | Assessment centre |
| G | Discipline and keeping commitments | N5 | 4 | no | Personality questionnaire |
See all 26 skills in the full profile
Assessment instruments for this job
Knowledge test (client-specific)
Professional knowledge test, customized for each client
Work sample test
Representative work sample under standardized conditions
Competency Check
Behavioral-Level Competency Assessment
360 Feedback
Multiple assessments based on behavioral anchors
Portfolio
Evaluation of prior work against fixed criteria
Big Fifty
Personality questionnaire, 150 items, 25 factors
Ability Scan
Aptitude Test: Verbal, Numerical, and Abstract Reasoning Skills
Structured interview
Behavioral interview with a fixed structure
15PF
Personality Profile, a shorter alternative to the Big Fifty
Big Fifty (Integrity Scale)
Mental Resilience (4C)
Mental Resilience According to the 4C Model
Comparable jobs
25 skills in the profile · medior
Network Administrator24 skills in the profile · medior
Cloud Engineer25 skills in the profile · medior
Cloud Architect26 skills in the profile · senior
Information Security Officer27 skills in the profile · senior
Security Engineer25 skills in the profile · senior
Security Analyst25 skills in the profile · medior
IT Service Desk Agent25 skills in the profile · junior