Information Security Officer — ISMS & Risk Lead

International Atomic Energy Agency; Wien; Vor Ort; EUR 70.000 - 100.000; Teilzeit

Zusammenfassung

The International Atomic Energy Agency in Vienna is seeking an Information Security Officer to strengthen the Agency's information security program. You will help operate the ISMS, manage security controls and coordinate risk-based security projects.

You will develop policies, deliver training, participate in audits, and report on security posture. A minimum of five years in enterprise IT security, strong English, and relevant certifications are expected.

Qualifikationen

• Bachelor's degree in computer science, information management, IT security or related field.
• Minimum of five years’ professional experience managing information security programs.
• Accredited information security certifications (CISSP, CISM, CISA or GIAC) are an asset.
• Excellent command of English; knowledge of other official IAEA languages is an asset.
• Experience with ISO/IEC 27000 family, risk management, policy development, compliance monitoring and stakeholder engagement.

Aufgaben

• Operate and enhance the Agency ISMS to achieve and maintain ISO 27001 certification.
• Develop, implement and maintain a state-of-the-art information security risk management system.
• Participate in information security risk assessment programs, identify risks and propose remediation actions.
• Contribute to comprehensive awareness programs and deliver training and phishing exercises.
• Support IT projects to ensure security is embedded and report on security posture.

Kenntnisse

IT Security

Identity and Access Management

Risk Management

ISMS

Project Management

Ausbildung

Bachelor's Degree in Computer Science or related field

CISSP/CISM/CISA/GIAC or equivalent certification

Jobbeschreibung

The International Atomic Energy Agency in Vienna is seeking an Information Security Officer to strengthen the Agency's information security program. You will help operate the ISMS, manage security controls and coordinate risk-based security projects.

You will develop policies, deliver training, participate in audits, and report on security posture. A minimum of five years in enterprise IT security, strong English, and relevant certifications are expected.