Information Security Executive

Job highlights

• Requirements . 2-5 years of experience in ISMS / Information Security / IT GRC / IT Compliance / Cybersecurity Governance

• Hands-on experience in risk assessment and risk treatment

• Experience supporting ISO / internal/external audits

• Good understanding of: . Information Security Governance

• Maintain and continuously improve the organizations ISMS in alignment with ISO/IEC 27001 .

• Coordinate internal and external ISO audits , including audit preparation, evidence collection, and closure of observations.

• Conduct information security risk assessments and maintain the risk register and risk treatment plans.

• Develop, review, and maintain information security policies, procedures, standards, and guidelines .

• Coordinate the implementation and monitoring of ISO 27001 Annex A controls .

• Maintain ISMS documentation, control evidence, compliance records, and audit trackers. ******- Conduct periodic user access reviews, asset reviews, and security compliance checks .

• Support vendor/third-party security assessments and compliance reviews.

• Coordinate information security incident reporting, investigation, corrective actions, and documentation .

• Support Business Continuity and Disaster Recovery activities.

• Conduct and coordinate employee information security awareness and training programs , including phishing awareness, password security, social engineering, data protection, and acceptable-use practices.

• Monitor compliance with organizational security policies and report deviations. ******- Coordinate with IT, HR, Operations, and other internal teams for implementation of security controls.

• Track corrective and preventive actions and ensure timely closure. **- Prepare ISMS reports, dashboards, compliance reports, and management review inputs .

• **Keep updated with applicable information security standards, regulations, and industry best practices.

  Requirements

  • 2-5 years of experience in ISMS / Information Security / IT GRC / IT Compliance / Cybersecurity Governance .
  • Strong understanding of ISO 27001 and ISMS implementation .
  • Knowledge of ISO 27001 Annex A controls .
  • Hands-on experience in risk assessment and risk treatment .
  • Experience supporting ISO/internal/external audits .
  • ******Good understanding of:

    • Information Security Governance

    • Access Control

    • Asset Management

    • Incident Management

    • Vendor Risk Management

    • Business Continuity

    • Data Protection & Privacy

    • Security Awareness

    • Strong documentation and report-writing skills.

    • Good communication and stakeholder-management skills.

    • Strong attention to detail and ability to manage compliance activities independently.

      Benefits

      • ISO 27001 Lead Implementer
      • ISO 27001 Lead Auditor
      • ISO 27001 Internal Auditor
      • CISA
      • CISM
      • CRISC**********************

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.