INFORMATION SECURITY OFFICER (CONTRACTUAL)

Responsible to: Head of ICT RH SEA and CISO PSI Software SE

Relationship: Works closely with the CISO PSI SE, Head of ICT, ICT Engineers, Total Quality Management Department and the IT users of the Company.

General Description: The Information Security Officer (ISO) is responsible for managing and maintaining the organization’s Information Security Management System (ISMS) and ensuring continuous compliance with ISO/IEC 27001 and related ISO 27000 standards.

The role focuses on information security governance, risk management, compliance, and audit readiness, ensuring that the organization maintains a structured and effective security posture. The ISO acts as the central coordinator for security policies, risk assessments, and audit activities, while promoting security awareness across the organization.

Primary Job Functions:

·       Implement, maintain, and continuously improve the ISMS in accordance with ISO/IEC 27001. The person will be the local execution and implementation while prioritization and approach are aligned with CF Security & Resilience, PSI Software SE.

·       Ensure compliance with PSI Information Security Policies and applicable regulatory or contractual requirements

·       Conduct information security risk assessments, maintain the risk register, and track mitigation actions

·       Coordinate and support internal audits, external ISO certification audits, and audit remediation activities

·       Develop, review, and maintain information security policies, procedures, standards, and documentation

·       Monitor and report on information security risks, incidents, and control effectiveness

·       Assess the impact of system changes and new technologies on information security posture

·       Identify security weaknesses, recommend improvements, and coordinate implementation of corrective actions

·       Work with ICT teams to ensure appropriate technical and administrative security controls are in place

·       Drive security awareness and training programs for employees

·       Act as the point of contact for all information security-related matters within the organization

Required Attitude:

·       Strong analytical and problem-solving mindset with attention to detail

·       High level of integrity and accountability in handling sensitive information

·       Good communication and stakeholder engagement skills

·       Ability to work independently while coordinating across departments

·       Committed to continuous learning in a rapidly evolving cybersecurity landscape

Required Knowledge:

·       Strong understanding of Information Security principles and controls

·       Working knowledge of ISO/IEC 27001 ISMS framework and compliance requirements

·       Familiarity with risk assessment methodologies and audit processes

·       Familiarity with industrial cybersecurity standards such as IEC 62443 is an added advantage

Required Skills:

·       Experience in ISMS implementation, maintenance, and audit coordination

·       Ability to develop and maintain policies, procedures, and security documentation

·       Good understanding of IT infrastructure, networks, and security controls

·       Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor are an advantage.

Additional Desired Skills:

Education:

·       Minimum Diploma or Degree in Computer Science, Information Technology, Cybersecurity, Engineering, or equivalent.

Experience:

·       3–5 years in Information Security / IT Governance.

Work Status:

·       Full-time

·       Permanent

Travel:

·       Moderate travel may be required.