Information Security Executive

• Maintain
• and continuously improve the organization's ISMS in alignment with
• ISO/IEC 27001.
• Coordinate internal and external ISO audits, including audit preparation,
• evidence collection, and closure of observations.
• Conduct information security risk assessments and maintain the risk
• register and risk treatment plans.
• Develop,
• review, and maintain information security policies, procedures,
• standards, and guidelines.
• Coordinate
• the implementation and monitoring of ISO 27001 Annex A controls.
• Maintain
• ISMS documentation, control evidence, compliance records, and audit
• trackers.
• Conduct
• periodic user access reviews, asset reviews, and security compliance
• checks.
• Support vendor/third-party security assessments and compliance reviews.
• Coordinate
• information security incident reporting, investigation, corrective
• actions, and documentation.
• Support Business Continuity and Disaster Recovery activities.
• Conduct
• and coordinate employee information security awareness and training
• programs, including phishing awareness, password security, social
• engineering, data protection, and acceptable-use practices.
• Monitor
• compliance with organizational security policies and report deviations.
• Coordinate
• with IT, HR, Operations, and other internal teams for
• implementation of security controls.
• Track
• corrective and preventive actions and ensure timely closure.
• Prepare ISMS reports, dashboards, compliance reports, and management review
• inputs
.
• Keep
• updated with applicable information security standards, regulations, and
• industry best practices.

Requirements

• 2–5
• years of experience in ISMS / Information Security / IT GRC / IT
• Compliance / Cybersecurity Governance.
• Strong
• understanding of ISO 27001 and ISMS implementation.
• Knowledge
• of ISO 27001 Annex A controls.
• Hands-on
• experience in risk assessment and risk treatment.
• Experience
• supporting ISO/internal/external audits.
• Good
• understanding of:
• Information
• Security Governance
• Access
• Control
• Asset
• Management
• Incident
• Management
• Vendor
• Risk Management
• Business
• Continuity
• Data
• Protection & Privacy
• Security
• Awareness
• Strong

  documentation and report-writing skills.

• Good

  communication and stakeholder-management skills.

• Strong

  attention to detail and ability to manage compliance activities

  independently.

Benefits

• ISO
• 27001 Lead Implementer
• ISO
• 27001 Lead Auditor
• ISO
• 27001 Internal Auditor
• CISA
• CISM
• CRISC