Information Security officer

Seniority

• L3 (Intermediate)

Educational Qualifications

• 4-Year IT-related Degree

Relevant Experience

• Minimum 7 years of experience within the Cyber Security domain.
• Proven experience in defining and implementing IT processes derived from security policies and ensuring adherence to local and industry regulations.

Required Certifications

• CISM (Certified Information Security Manager)
• CISSP (Certified Information Systems Security Professional)

Key Responsibilities

• Ensure alignment of security policies, controls, and practices with business objectives and regulatory compliance requirements.
• Develop, implement, and maintain information security governance frameworks, policies, standards, and procedures.
• Monitor and assess compliance with internal security policies and external regulatory requirements.
• Conduct security risk assessments and provide recommendations to mitigate identified risks.
• Translate security risks and technical security concepts into business-focused insights for stakeholders and management.
• Support the development and maintenance of security awareness and compliance programmes.
• Collaborate with business and technology teams to ensure security requirements are integrated into operational processes.
• Assist in managing security audits, assessments, and compliance reviews.
• Monitor changes in regulatory requirements and industry standards to ensure ongoing compliance.
• Support incident management, risk management, and continuous improvement initiatives within the information security function.

Skills & Competencies

• Strong knowledge of Information Security Governance, Risk, and Compliance (GRC).
• Understanding of security frameworks, standards, and regulatory requirements.
• Ability to communicate complex security concepts to both technical and non-technical stakeholders.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent stakeholder management and communication skills.
• Ability to work effectively in a fast-paced and dynamic environment.