Information Security Officer
Position summary
About our company
Introduction
Job description
Develop, implement, and maintain information security policies, standards, and procedures.
Monitor and manage security systems, including firewalls, antivirus, intrusion detection, and access controls.
Conduct regular risk assessments and vulnerability assessments to identify and address security gaps.
Investigate security breaches, incidents, and threats, and implement corrective actions.
Ensure compliance with relevant legislation, regulatory requirements, and industry best practices.
Provide training and awareness programs to staff on information security protocols and procedures.
Maintain up-to-date knowledge of emerging threats and technologies in information security.
Collaborate with IT, HR, and other departments to ensure secure handling of data and IT systems.
Support audits and internal/external security assessments.
Develop and maintain incident response and disaster recovery plans.
Minimum requirements
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
Professional certification in Information Security (e.g., CISSP, CISM, ISO 27001 Lead Implementer/Lead Auditor) advantageous.
Experience
Minimum 3–5 years’ experience in information security or IT security roles.
Experience with risk assessments, vulnerability management, and security incident handling.
Knowledge of industry-standard security frameworks and best practices.