Job Description
Our client operates in the financial services sector.
Job Description:
- Develop and implement the organization's IT security strategy, with a focus on governance, risk management, and compliance with regulatory standards.
- Oversee risk assessment processes to identify vulnerabilities and recommend appropriate mitigation strategies.
- Establish and maintain security policies, procedures, and standards to ensure compliance with industry best practices and regulations.
- Collaborate with cross-functional teams to promote a security-aware culture and ensure adherence to security protocols.
- Monitor and report on the effectiveness of security initiatives, providing insights to senior management and stakeholders.
- Lead security audits and assessments, coordinating with internal and external auditors to ensure compliance.
- Stay informed about emerging security threats and industry trends to proactively address potential risks.
Qualifications:
- Minimum of 5 years of experience in Information Security, with a focus on IT governance, risk management, and compliance.
- Hands-on experience as an ISO 27001 Implementation Lead.
- Strong understanding of regulatory requirements and information security best practices.
- Proven experience leading security initiatives and managing risk assessment processes.
- Excellent communication skills, with a good command of English and the ability to explain complex security concepts to non-technical stakeholders.
- Relevant certifications (e.g., CISSP, CISM, CRISC) are preferred.