Cybersecurity Implementer  

Purpose

• Manage and support ISMS activities in accordance with set objectives. Continuously develop and enhance information security knowledge and skills through participation of upskilling activities and training appropriate to the position.

Duties and Responsibilities

• Manage internal and external information security projects through effective project planning and implementation delegated by Senior Implementor or Lead.
• Assist in the conduct of the internal audit program as facilitated by the internal audit team. As well as providing assistance to the organization on the preparation for external audit, during the audit, and post-audit activities.
• Maintain and assist in the enhancement of the organization’s information security program through the development of security awareness initiatives, monitoring of ISMS metrics based on ISMS objectives.
• Develop and/or update ISMS documentation such as policies, guidelines, and procedures as necessary.
• Support performance monitoring of the implementation team through proactive feedback.
• Provide/Assist in the Information security-related awareness campaign within the organization from time to time.
• Develop one’s information security knowledge and build information security credentials by gaining the prescribed certifications. Immerse in group-initiated activities that promote soft skills development required for the role.

Qualifications

A. Minimum Education

Bachelor’s Degree of any Information Technology, Accounting or Engineering-related studies

B. Minimum Experience/Training

• Has experience in project and/or program management.
• Certifications related to Information Security (Sec+, CEH, CCNA, CCNP, ISO27001, etc) is an advantage.
• Familiarity with known Information Security standards, governance framework and regulations is an advantage

C. Competency

• Must have good communication and presentation skills.
• Must be assertive, confident, has critical thinking and good decision-making capabilities.
• Knowledge of computer networking concepts and protocols, and network security methodologies.