Information Security Officer  

As Information Security Officer, you’ll be working hand-in-hand with stakeholders across the organization to safeguard company information. You’ll be leading the organization in complying with security standards such as ISO 27001. You’ll work with IT and other technology teams in identifying & assessing risks and enacting proactive & reactive cybersecurity measures. You’ll be the spearhead of change in implementing risk management and security controls throughout the company.

Responsibilities and Duties

• Lead the organization in a holistic approach to information security
• Spearhead and oversee organization-wide compliance with security standards (ISO 27001)
• Lead and manage organization-wide Information Security Management System
• Communicate with cross-departmental stakeholders in fulfilling security programs and projects
• Lead the Security Operations Committee in enacting proactive and reactive cybersecurity measures across technology teams
• Provide guidance for security compliance to business units in an advisory role

As you’ll be working together with a lot of people, communication skills & other soft skills are as important as your technical abilities:

• Experience in MIS manager, systems administrator, or other IT related roles
• Strong communication and stakeholder-management skills
• Broad knowledge of computer networks and systems
• Ability to identify and assess information security risks across the organization
• Ability to work within a changing environment and lead the implementation of change, while assessing and mitigating impact of change management initiatives to business performance
• Experience in Vulnerability Assessment and Penetration Testing

Desired Qualifications

These are great-to-have, but not having some or any of these is not a deal-breaker:

• Experience with security standards compliance (ISO 27001 / PCI-DSS / SSAE 16 / SOC 2)
• Certifications in information security such as OSCP, CEH, CISA, CISSP, CRISC, ISO 27001 Lead Auditor, ISO 27001 Lead Implementor, ISO 27001 Internal Auditor
• Experience in project or program management
• Experience working with cloud systems (GCP preferred), especially within an information security context