Information Security Executive

• Maintain and continuously improve the organization's ISMS in alignment with ISO/IEC 27001.
  
• Coordinate internal and external ISO audits, including audit preparation, evidence collection, and closure of observations.
  
• Conduct information security risk assessments and maintain the risk register and risk treatment plans.
  
• Develop, review, and maintain information security policies, procedures, standards, and guidelines.
  
• Coordinate the implementation and monitoring of ISO 27001 Annex A controls.
  
• Maintain ISMS documentation, control evidence, compliance records, and audit trackers.
  
• Conduct periodic user access reviews, asset reviews, and security compliance checks.
  
• Support vendor/third-party security assessments and compliance reviews.
  
• Coordinate information security incident reporting, investigation, corrective actions, and documentation.
  
• Support Business Continuity and Disaster Recovery activities.
  
• Conduct and coordinate employee information security awareness and training programs, including phishing awareness, password security, social engineering, data protection, and acceptable-use practices.
  
• Monitor compliance with organizational security policies and report deviations.
  
• Coordinate with IT, HR, Operations, and other internal teams for implementation of security controls.
  
• Track corrective and preventive actions and ensure timely closure.
  
• Prepare ISMS reports, dashboards, compliance reports, and management review inputs.
  
• Keep updated with applicable information security standards, regulations, and industry best practices.
  

Requirements

• 2–5 years of experience in ISMS / Information Security / IT GRC / IT Compliance / Cybersecurity Governance.
  
• Strong understanding of ISO 27001 and ISMS implementation.
  
• Knowledge of ISO 27001 Annex A controls.
  
• Hands-on experience in risk assessment and risk treatment.
  
• Experience supporting ISO/internal/external audits.
  
• Good understanding of:
  
  • Information Security Governance
    
  • Access Control
    
  • Asset Management
    
  • Incident Management
    
  • Vendor Risk Management
    
  • Business Continuity
    
  • Data Protection & Privacy
    
  • Security Awareness
    
• Strong documentation and report-writing skills.
  
• Good communication and stakeholder-management skills.
  
• Strong attention to detail and ability to manage compliance activities independently.
  

Benefits

• ISO 27001 Lead Implementer
  
• ISO 27001 Lead Auditor
  
• ISO 27001 Internal Auditor
  
• CISA
  
• CISM
  
• CRISC