Mission
We are looking for an Information Security Consultant to join our dynamic team. In this role, you will play a crucial part in developing and implementing security strategies, conducting risk assessments, and ensuring compliance with industry standards.
Role Overview :
- Develop and maintain information security policies and procedures, aligned with business needs and industry best practices.
- Ensure compliance with IT Management System (ITMS) requirements.
- Develop and maintain the information security risk framework to assess, monitor, and review information security risks for the organization.
- Maintain risk treatment strategies and work with risk owners to manage their lifecycle.
- Manage and implement an information security audit program, ensuring the management of non-conformities and improvement opportunities identified during audits.
- Manage identified vulnerabilities, policy violations, or non-conformities discovered during audits.
- Lead and manage the investigation and response to security incidents to ensure timely and effective containment, eradication, and recovery actions.
- Document incident details, actions taken, and contribute to post-incident reports for continuous improvement.
- Develop and implement security training and awareness programs for employees on best practices, policies, and security guidelines.
- Collaborate with different groups to promote a security-conscious culture.
- Implement and provide regular security reports to top management and other stakeholders, offering insights into the status of information security metrics.
Profile
Background in Information Technology.Experience in an Information security roleBackground in Information Security Risks processes and in IT / Information Security Audit.Ability to deliver security education and awareness training sessions and material.Excellent written / verbal communications skills and organisational skills.Knowledge of information security standards and regulations, such as ISO 27001, ISO 27002, ISO 27701, ISAE 3402, GDPR, DORA, and NIS2.Cybersecurity knowledge.Good level of English