Job Description
Responsibilities
- Monitor and maintain ISO27001 adherence
- Conduct risk and gap assessments to identify gaps in existing security governance
- Develop, maintain and review information security policies, standards, procedures and guidelines aligned with business objectives and regulatory requirements
- Maintain and improve the security technologies deployed, including creating use cases, customizing or better configuring the tools based on past and current threats
- Develop and maintain data governance and data security
- Develop and conduct security awareness training programs
- Coordinate internal and external audits, including evidence collection, walkthroughs and remediation tracking
- Act as a liaison between security, IT, business units and auditors to ensure consistent understanding of security and compliance requirements
- Maintain documentation repositories for policies, procedures, risk assessments and audi...