Job Description
·Person that has implemented, maintained and supported an ISO 27001 program
·Has possibly performed a risk assessment
·Person has experience tracking ISO remediation efforts
·Knowledge of policies and process of ISO 27001
General description of the role:
To assist implementing, managing and sustaining the ISO 27001 security program and liaising closely with SMEs and project lead and hold monthly committee meetings. The purpose of the function, is to bring the organizations information security risks under explicit management control through the Information Security Management System (ISMS)
Job Responsibilities:
·Lead the implementation, operation, support and maintenance of the Information Security Management System based on the ISO/IEC 27000 series standards, including obtaining our certification against ISO/IEC 27001.
·leads the preparation and the implementation of necessary information security policies, standards, procedures and guidelines, in conjunction with the Security Committee to get appropriate approvals and feedback.
·Manages and leads the design and operation of related compliance monitoring and improvement activities to ensure compliance both with internal security policies etc. and applicable laws and regulations
·Support departments and help manage projects for implementation of information security management system
·Supports suitable information security awareness, training and educational activities
·Manages information security risk assessments and controls selection activities
·Liaison with and offers strategic direction to related governance functions (such as Risk Management, IT, HR, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.
Qualifications:
- Bachelor’s degree from an accredited college or university.
- Minimum of 5 years’ experience in a similar role
- PECB Certified ISO/IEC 27001 Lead Implementer
- Great written and verbal communication skills
- Great team player