Senior InfoSec Risk & ISO 27001 Lead – Remote

Openkrill; United States; À distance; USD 120 000 - 180 000; Plein temps

Avantages offerts par ce poste

Fully remote work

Core hours 12:00–18:00 Manila time

Company-provided tools & equipment

Résumé du poste

Salmon is seeking an information security professional to own risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology.

You will assess controls across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development; maintain the risk register and drive remediation; and produce concise governance reporting. Fully remote with Manila core hours.

Qualifications

• Extensive experience in information security risk management (inherent and residual risk)
• Ability to assess controls across IAM, cloud, endpoint security, monitoring, and more
• Hands-on experience reviewing or testing controls
• Working knowledge of ISO 27001 and governance reporting
• Familiarity with risk and control registers and evidence management

Responsabilités

• Form an independent view of security risk and challenge controls with the Group CISO
• Assess control design and operating effectiveness across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development
• Turn risk and control data into clear, decision-ready reporting for governance forums
• Own the security risk process end to end: assessment, treatment, acceptance, monitoring, and reporting
• Maintain the risk register and ensure remediation status stays current
• Maintain the ISO 27001 ISMS: policies, SoA, risk records, control evidence, and exceptions
• Track deficiencies, findings, exceptions, and remediation actions
• Define KRIs and control metrics and escalate as needed

Connaissances

InfoSec risk mgmt

Control assessment

ISO 27001 knowledge

GRC platforms

Risk reporting

IAM familiarity

Cloud security

Description du poste

Salmon is seeking an information security professional to own risk management, control assurance, and ISO 27001 ISMS governance across a regulated group spanning banking, consumer finance, and technology.

You will assess controls across IAM, cloud, endpoint security, monitoring, vulnerability management, data protection, and secure development; maintain the risk register and drive remediation; and produce concise governance reporting. Fully remote with Manila core hours.