Handling Information Security Management, address the information security threats and incidents and drive remediation.
In conjunction with the Legal team Identify information management and protection laws and regulations and implement actions to ensure compliance with relevant information management and protection laws.
Identify, track and oversee internal and external compliance and regulatory requirements (PCI, Data Privacy, etc.) for the organization including compliance with established policies, procedures, standards, baselines and controls.
Maintain an information management and protection framework for an effective company-wide governance program.
Manage information security awareness programs and provide training to all staff on a basis.
Manage day-to-day security activities, including conducting vendor security assessment, privacy security assessment, implementing company policies, and communication related to the information security program.
Manage and Support the Information Security requirements across different BUs.
Support other local ISO members in different regions as a regional ISO team member.
Job Requirements
Bachelor’s degree or Master’s degree in IT, Security or Computer Science or equivalent major
Minimum 5 to 10 years of experience in information security governance, risk and compliance.
English: Business level (written & verbal). IELTS 6.5+ or equivalent Certificate is preferrable.
Excellent communication and interpersonal skills to interact with individuals at all levels of the organization.
Strong knowledge and Experience in information risk assessment and compliance needs.
Strong knowledge and Experience in information security frameworks.
Strong knowledge and Experience in applicable laws, regulations, and standards relating to security and data privacy.
Good understanding of information security governance frameworks such as ISO27001 (and ISO27701 framework, etc.,)
Demonstrated ability to develop and implement security policies, procedures and programs.
Understanding and ability of risk analysis for cyber threats. (Preferred)
