Information Security Officer

We’re looking for a Chief Information Security Officer to oversee our organization’s information security program. This includes developing and implementing security policies and procedures, managing security technologies, and overseeing security awareness training. The ideal candidate will have extensive experience in information security, including experience with security risk management, incident response and forensics.

Requirements:

Information Security Officer Duties:

• Manage all security operations for the IT/IS department.
• Set and enforce compliance regulations and standards.
• Develop information security policies.
• Develop policies, procedures, and standards.
• Maintain and implement adequate controls.
• Maintain data confidentiality.
• Enforce regulations, procedures, standards, and policies.
• Monitor and continuously assess risks.
• Control and document all activities performed by employees.
• Develop, implement, and adhere to a company code of conduct.
• Develop, implement, and adhere to a company code of ethics.
• Approve all employee IT/IS access requests.
• Provide Information Security departmental and project specific oversight.
• Provide Information Security project management support.
• Proactively identify.
  
  

• Serve as the company’s information security officer, overseeing all security initiatives, policies, and procedures
• Develop, implement, and monitor information security policies and procedures.
• Develop and implement information security strategies including vulnerability assessments and penetration testing, and cybersecurity awareness and training.
• Translate IT security risks into actionable requirements.
• Research emerging security threats and vulnerabilities and advise management on appropriate countermeasures
• Perform risk assessment and vulnerability analysis.
• Promote the company’s information security reputation.
• Evaluate adequacy of third-party service providers
• Perform IT asset inventories and provide detailed reports for budgetary purposes.
• Develop and implement security incident response plans.
• Monitor and audit IT and company records.
  
  

• 3+ years of proven experience at the highest level of information security management.
• Proven leadership, problem-solving, and critical thinking abilities
• Proven ability to establish and implement information security policies and procedures.
• Experience with IT security risk assessment and mitigation
  
  

• CISA/ CISSP/ CISA