Information Security Lead (Lead Auditor (LA) or Lead Implementer (LI)

QualityKiosk Technologies is hiring for Infosec Lead.

Must Haves:

• Minimum of 5 years of experience in information security.
• Proven experience in managing ISO 27001, PIMS, and SOC 2 compliance programs.
• Must have experience in managing ISO 27001 Audit & Data Privacy.
• Certification Required - ISO 27001:2022 Lead Auditor (LA) or Lead Implementer (LI).

Job Description

ISO 27001 Management:

• Develop, implement, and maintain the ISO 27001 Information Security Management System (ISMS).
• Conduct regular risk assessments and ensure compliance with ISO 27001 standards.
• Lead the preparation and execution of ISO 27001 certification and surveillance audits.
• Oversee the implementation and management of PIMS in accordance with relevant privacy regulations.
• Ensure the protection of personal data and compliance with data privacy laws.
• Manage the SOC 2 compliance program, including the development and maintenance of controls.
• Coordinate with external auditors for SOC 2 Type I and Type II audits.
• Develop and deliver information security awareness training programs for employees.
• Promote a culture of security awareness and best practices across the organization.
• Plan and conduct internal audits to assess the effectiveness of the ISMS and other security controls.
• Identify and report on areas of non-compliance and recommend corrective actions.
• Lead the incident response team in identifying, managing, and mitigating security incidents.
• Conduct post-incident reviews and implement lessons learned.

Preferred candidate profile

• Minimum of 5 years of experience in information security, with at least 2 years in a leadership role.
• Proven experience in managing ISO 27001, PIMS, and SOC 2 compliance programs.
• Strong knowledge of information security principles, practices, and technologies.
• Excellent communication and leadership skills.
• Ability to work collaboratively with cross-functional teams.
• ISO 27001:2022 Lead Auditor (LA) or Lead Implementer (LI) certification is required.
• Additional certifications such as CISSP, CISM, or CISA are preferred.