Objective of job
Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies.
- Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization.
- Responsible for organizational and technical controls
- Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures
- Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization
- Assessing threats and developing appropriate security measures and assessing their effectiveness
- Assist business partners in information classification
- Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3]
- Take care of actuality of disaster or application recovery plans
- Develop and conduct target group orientated awareness campaigns
- Define security controls derived from policies
Job designation
- Developing and Maintaining Security Policies and Standards
Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed.
- Ensuring Regulatory Compliance
Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them.
- Security Audits and Assessments
- Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement.
- Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests.
- Risk Management and Governance
- Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls.
- Contribute to the development of a strong governance framework for information security.
- Compliance Reporting
Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders.
Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary
Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies
- Collaboration and Communication
Collaborating with other IT teams, developers, and business stakeholders.
Providing security training and awareness to employees.
Communicating security risks and recommendations to management.
