Infosec Consultant-ISMS
-Develop and implement an Information Security Management System (ISMS) framework based on industry standards such as ISO 27001.
- Conduct risk assessments and vulnerability assessments to identify potential security threats and vulnerabilities.
- Design and implement security controls and measures to protect the organization's information assets.
- Establish security policies, procedures, and guidelines to ensure compliance with regulatory requirements and industry best practices.
- Monitor and assess security incidents, investigate breaches, and recommend remedial actions.
- Conduct security awareness training and education programs for employees to promote a security-conscious culture.
- Collaborate with cross-functional teams to integrate security controls into business processes and technology solutions.
- Stay updated with the latest security threats, vulnerabilities, and industry trends to proactively mitigate risks.
- Participate in audits and compliance assessments to ensure adherence to security standards.
- Maintain documentation, records, and reports related to the ISMS and security activities.
- Provide guidance and support to internal stakeholders on security-related matters.
Qualifications:
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
- Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA) are highly desirable.
- Strong knowledge of information security principles, best practices, and regulatory requirements.
- Experience in implementing and managing an ISMS based on ISO 27001 or other relevant frameworks.
- Proficiency in conducting risk assessments, vulnerability assessments, and incident response.
- Familiarity with security technologies such as firewalls, intrusion detection/prevention systems, antivirus software, and encryption.
- Excellent communication and interpersonal skills to collaborate with internal and external stakeholders.
- Analytical mindset, problem-solving skills, and attention to detail.