Information Security Management System Executive

Askheadhunter; Selangor; On-site; MYR 60,000 - 90,000; Full time

Job summary

A recruitment firm in Malaysia is seeking an Information Security Management System Executive responsible for designing and implementing an ISMS framework. Ideal candidates will have a bachelor's degree in IT or Cybersecurity and a minimum of 3 years' experience in a similar role. Prospective applicants with knowledge in the aviation maintenance industry will have an advantage. This position demands strong skills in risk assessment and compliance management.

Qualifications

• Minimum 3 years of working experience in a relevant field.
• Experience in aviation maintenance industry is an advantage.
• Able to work in a fast-paced and dynamic environment.

Responsibilities

• Design and implement an ISMS framework in accordance with recognized standards.
• Conduct risk assessments to identify vulnerabilities.
• Develop and deliver security awareness training programs.

Skills

Information Security Management

Risk Assessment

Security Policies Development

Compliance Management

Incident Response

Security Awareness Training

Education

Bachelor Degree in Information Technology or Cybersecurity

Tools

ISO 27001

CISSP

CISM

Job description

Information Security Management System Executive

Responsibilities

• Design and implement an ISMS framework in accordance with recognized standards, e.g. ISO 27001
• Establish security policies, procedures and guidelines, ensuring integration with aviation safety requirements, such as EASA Part-IS
• Conduct risk assessments to identify vulnerabilities and implement control measures
• Maintain ISMS documentation to ensure compliance with regulatory standards
• Develop and deliver security awareness training programs for employees
• Ensure compliance with relevant laws, regulations, and standards, and prepare for audits
• Manage incident response plans, investigate security incidents, and recommend improvements
• Monitor the effectiveness of security controls and report on ISMS performance using metrics and KPIs
• Collaborate with IT and other departments to integrate ISMS practices and promote security initiatives
• Continuously enhance the ISMS by staying updated on industry trends and best practices
• Ensure third-party vendors comply with ISMS requirements and manage vendor relationships
• Develop, test, and maintain business continuity and disaster recovery plans
• Evaluate and implement security technologies, ensuring secure system configurations

Qualifications

• Bachelor Degree in Information Technology, Cybersecurity or a related field
• Minimum 3 years of working experience in similar capacity, Information Technology and Cybersecurity
• Working experience in aviation maintenance industry is an added advantage
• Relevant certifications e.g. ISO 27001 Lead Implementer, CISSP, CISM or its equivalent
• Experience in implementing ISMS and security frameworks
• Able to work in a fast-paced and dynamic environment