Information Security Executive

• Maintain
  and continuously improve the organization's ISMS in alignment with
  ISO/IEC 27001.
  
• Coordinate internal and external ISO audits, including audit preparation,
  evidence collection, and closure of observations.
  
• Conduct information security risk assessments and maintain the risk
  register and risk treatment plans.
  
• Develop,
  review, and maintain information security policies, procedures,
  standards, and guidelines.
  
• Coordinate
  the implementation and monitoring of ISO 27001 Annex A controls.
  
• Maintain
  ISMS documentation, control evidence, compliance records, and audit
  trackers.
  
• Conduct
  periodic user access reviews, asset reviews, and security compliance
  checks.
  
• Support vendor/third-party security assessments and compliance reviews.
  
• Coordinate
  information security incident reporting, investigation, corrective
  actions, and documentation.
  
• Support Business Continuity and Disaster Recovery activities.
  
• Conduct
  and coordinate employee information security awareness and training
  programs, including phishing awareness, password security, social
  engineering, data protection, and acceptable-use practices.
  
• Monitor
  compliance with organizational security policies and report deviations.
  
• Coordinate
  with IT, HR, Operations, and other internal teams for
  implementation of security controls.
  
• Track
  corrective and preventive actions and ensure timely closure.
  
• Prepare ISMS reports, dashboards, compliance reports, and management review
  inputs.
  
• Keep
  updated with applicable information security standards, regulations, and
  industry best practices.
  

Requirements

• 2–5
  years of experience in ISMS / Information Security / IT GRC / IT
  Compliance / Cybersecurity Governance.
  
• Strong
  understanding of ISO 27001 and ISMS implementation.
  
• Knowledge
  of ISO 27001 Annex A controls.
  
• Hands-on
  experience in risk assessment and risk treatment.
  
• Experience
  supporting ISO/internal/external audits.
  
• Good
  understanding of:
  
• Information
  Security Governance
  
• Access
  Control
  
• Asset
  Management
  
• Incident
  Management
  
• Vendor
  Risk Management
  
• Business
  Continuity
  
• Data
  Protection & Privacy
  
• Security
  Awareness
  
• Strong
  documentation and report-writing skills.
  
• Good
  communication and stakeholder-management skills.
  
• Strong
  attention to detail and ability to manage compliance activities
  independently.
  

Benefits

• ISO
  27001 Lead Implementer
  
• ISO
  27001 Lead Auditor
  
• ISO
  27001 Internal Auditor
  
• CISA
  
• CISM
  
• CRISC