Information Security Officer

Skills :

ISO Standards, isms auditor, ISMS, consultant ISMS, auditing skills, communication, firewalls, VAPT,

Responsibilities

• Responsible for developing, reviewing, implementing and maintaining information security policies designed to protect information and any supporting information systems from any unauthorized access, use, disclosure, corruption or destruction
• Develop policies, procedures and standards to ensure the security, confidentiality and privacy of information that is consistent with organizational Information Security Policy
• Monitor and report on any information intrusion incidents and activate strategies to prevent further incidents.
• Work with concerned stakeholders to ensure that information assets have been assigned appropriate security classifications.
• Identifying the classification level of information asset
• Defining and implementing appropriate safeguards to ensure the confidentiality, integrity, and availability of the information asset
• Ensure compliance and report situations of non-compliance
• Providing training for Information Security
• Define ISMS and manage ISO 27k contracts for small to mid-sized companies.
• Internal Audit : Performed Internal Audits based on Compliance such as ISO 27001 and CSA Star and supported external audits for the same.
• Compliance Evaluation : Assessment and evaluation of Legal, regulatory and compliance requirements as per business requirements, business locations based, type of product and Data collected, stored, and processed. Such as Data protection and Privacy laws.
• Risk Assessment : Performed periodic Risk assessment of Organization, SaaS products, Cloud Infrastructure, War and Pandemic situations.

Required Candidate Profile

Graduate or Master s in Engineering or IT security

Experienced in ISO 27001

Experience as IS auditor / ISMS Consultant

Prior experience in consulting firms is added feature

Strong auditing skills

Excellent Communication Skills

Experience : 6M to 1 year

Skills Required

iso standards, Risk Assessment, Iso 27001, Vapt, Firewalls