Handling Information Security Management, address the information security threats and incidents and drive remediation.
•
In conjunction with the Legal team Identify information management and protection laws and regulations and implement actions to ensure compliance with relevant information management and protection laws.
•
Identify, track and oversee internal and external compliance and regulatory requirements (PCI, Data Privacy, etc.) for the organization including compliance with established policies, procedures, standards, baselines and controls.
•
Maintain an information management and protection framework for an effective company-wide governance program.
•
Manage information security awareness programs and provide training to all staff on a basis.
•
Manage day-to-day security activities, including conducting vendor security assessment, privacy security assessment, implementing company policies, and communication related to the information security program.
•
Manage and Support the Information Security requirements across different BUs.
•
Support other local ISO members in different regions as a regional ISO team member.
Job Requirements
•
Bachelor’s degree or Master’s degree in IT, Security or Computer Science or equivalent major
•
Minimum 5 to 10 years of experience in information security governance, risk and compliance.
•
English: Business level (written & verbal). IELTS 6.5+ or equivalent Certificate is preferrable.
•
Excellent communication and interpersonal skills to interact with individuals at all levels of the organization.
•
Strong knowledge and Experience in information risk assessment and compliance needs.
•
Strong knowledge and Experience in information security frameworks.
•
Strong knowledge and Experience in applicable laws, regulations, and standards relating to security and data privacy.
•
Good understanding of information security governance frameworks such as ISO27001 (and ISO27701 framework, etc.,)
•
Demonstrated ability to develop and implement security policies, procedures and programs.
•
Understanding and ability of risk analysis for cyber threats. (Preferred)