Handling Information Security Management, address the information security threats and incidents and driving remediation.
In conjunction with the Legal team Identify information management and protection laws and regulations and implement actions to ensure compliance with relevant information management and protection laws.
Identify, track and oversee internal and external compliance and regulatory requirements (PCI, Data Privacy, etc.) for the organization including compliance with established policies, procedures, standards, baselines and controls.
Maintain an information management and protection framework for an effective company-wide governance program.
Manage information security awareness programs and provide training to all staff on a basis.
Manage day-to-day security activities, including conducting vendor security assessments, privacy security assessments, implementing company policies, and communication related to the information security program.
Manage and Support the Information Security requirements across different BUs.
Support other local ISO members in different regions as a regional ISO team member.
JOB REQUIREMENTS
Bachelor’s degree or Master’s degree in IT, Security or Computer Science or equivalent major.
Minimum 5+ years of experience in information security governance, risk and compliance.
English: Business level (written & verbal). IELTS 6.5+ or equivalent Certificate is preferrable.
Excellent communication and interpersonal skills to interact with individuals at all levels of the organization.
Strong knowledge and Experience in information risk assessment and compliance needs.
Strong knowledge and Experience in information security frameworks.
Strong knowledge and Experience in applicable laws, regulations, and standards relating to security and data privacy.
Good understanding of information security governance frameworks such as ISO27001 (and ISO27701 framework, etc.,)
Demonstrated ability to develop and implement security policies, procedures and programs.
Understanding and ability of risk analysis for cyber threats. (Preferred)
Other technical and/or security certifications are preferred. (e.g. CISA, CISM, CISSP, SANS, GIAC, etc.). (Preferred)
Ability to make Business Process Analysis.
Ability to handle sensitive and confidential information with discretion and integrity.
