Information Security Officer

Duties & Responsibilities:

1. Security Policy Development and Implementation
2. Develop, implement, and maintain comprehensive information security policies, procedures, and guidelines.
3. Ensure that security policies are aligned with business objectives and comply with regulatory requirements.
4. Risk Management:
5. Conduct regular risk assessments and vulnerability analyses.
6. Identify potential threats and vulnerabilities and develop mitigation strategies.
7. Implement and monitor security controls to manage and mitigate risks.
8. Incident Response:
9. Develop and maintain an incident response plan.
10. Lead the response to security incidents and breaches, including investigation, containment, and recovery efforts.
11. Conduct post-incident analyses and report findings to senior management.
12. Compliance and Auditing:
13. Ensure compliance with relevant regulations and standards (e.g., ISO 22301, ISO/IEC 27001).
14. Coordinate and oversee internal and external security audits.
15. Prepare and submit necessary compliance reports.
16. Security Awareness and Training:
17. Develop and deliver security awareness training programs for employees.
18. Promote a culture of security awareness within the organization.
19. Ensure that staff are aware of security policies and procedures.
20. Monitoring and Reporting:
21. Implement and manage security monitoring tools to detect and respond to threats.
22. Regularly review security logs and reports to identify and address security issues.
23. Regularly review security VAPT Reports and ensure issues are closed.
24. Provide regular reports on the status of the information security program to senior management.
25. Collaboration and Advisory:
26. Work closely with IT and other departments to ensure security measures are integrated into all aspects of the organization’s operations.
27. Serve as a key advisor to senior management on information security matters.
28. Collaborate with external partners and stakeholders to ensure a comprehensive security posture.

Qualification & Experience:

1. Bachelor's degree in information security or relevant degree.
2. 5-8 years of Information Security Governance, Risk, and Compliance experience.
3. Relevant certifications such as CISSP, CISM, CEH, ISO 27001 Lead Auditor, ISO 23001 Lead Auditor or CISA are highly desirable.
4. Experience in implementing the ISR / Country's Electronic Security Center standards.
5. Ability to prioritize a wide range of workloads with critical deadlines.
6. Availability outside of working hours to resolve emergency issues promptly.