Information Security Officer  

Responsibilities:

• The emphasis of this position is on policy development, program administration and compliance/incident response activities. The Information Security Officer serves as the process owner for all ongoing activities that serve to provide appropriate access to and protect the confidentiality and integrity of information in compliance with law, regulations, policies and standards in ACSS.
• Responsible for the development and delivery of a comprehensive information security and privacy program for the company
• Coordinate with concerned parties the development of information security policies, standards and procedures
• Work with key officers, data custodians and governance groups in the development of security policies
• Ensure that policies support compliance with external requirements such as PCI, ISM and ISO 27001
• Oversee the dissemination of policies, standards and procedures to the entire company
• Coordinate the development and delivery of an education and training program on information security and privacy matters for employees and other authorized users
• Serve as the compliance officer with respect to the company's information security policies and regulations
• Prepare and submit required reports to external agencies
• Develop and implement a review and monitoring system for assessment plans, implementations, operations and usage related to information security throughout ACSS
• Develop and implement a system that fosters appropriate and effective disaster recovery and contingency plans for information systems
• Develop and implement an Incident Reporting and Response System to address security incidents (breaches), respond to alleged policy violations or complaints from external parties
• Develop and implement an ongoing risk assessment program targeting information security and privacy matters; recommend methods for vulnerability detection and remediation and oversee vulnerability testing
• Keep abreast of latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities

• Candidate must possess at least a Bachelor's/College Degree in Computer Engineering/Computer Science/Information Technology or its equivalent
• Minimum of 10 years of solid industry and technology experience
• Must have experience in developing and administering an information security program
• Strong background in using next generation firewall
• With working knowledge of and experience in the policy and regulatory environment of information security
• Must be knowledgeable in PCI, ISM and ISO 27001
• Excellent project management, written and oral communication skills desired