About the Job
The ideal candidate will be professional, highly-analytical, and possess good written and verbal communication skills. To prosper in this role, you should be fluent in risk identification, risk management and other related industry security principles. Candidates should be aware of ISMS, SOC 2, OWASP, SANS and other security guidelines providers, and knowledge about Cloud Computing is a plus.
Roles and Responsibilities:
Implement and manage an effective security compliance program.
Develop and review company policies.
Advise management on the company’s compliance with cyber law and regulations through detailed reports.
Create and manage effective action plans in response to audit discoveries and compliance violations.
Regularly audit company procedures, practices, and documents to identify possible weaknesses or risks.
Assess company operations to determine compliance risk.
Ensure all employees are educated about trending Cyber Incidents and security training.
Resolve employee concerns about security compliance.
Conducting security assessments through vulnerability testing and risk analysis.
Performing both internal and external security audits.
Analyzing security breaches to identify the root cause.
Continuously updating the company’s incident response and disaster recovery plans.
Verifying the security of third-party vendors and collaborating with them to meet security requirements
Requirements:
Bachelor’s/ Master degree in IT, Cyber security, business management, or in related fields.
1 – 2 years’ proven experience in the Information Security domain.
Good knowledge of security requirements, Regulatory Guidelines and procedures.
Good oral and written communication skills.
ISO certification will be an added advantage.