Local Information Security Officer at Alfred & Victoria Associates

Job Description

• The ideal candidate will have at least 5 years of experience in IT with a strong background in information security and risk management and will be responsible for implementing and maintaining our information security program.
• You will work closely with other teams to ensure that our systems, processes, and data are secure and compliant with regulatory standards.

Key Duties & Responsibilities

• Develop and manage relationships with external software development vendors and partners.
• Provide regular progress updates and reports to senior management.
• Develop and implement information security policies, procedures, and standards that align with regulatory requirements and industry best practices.
• Conduct regular security assessments to identify potential risks and vulnerabilities and implement controls to mitigate those risks.
• Monitor and investigate security incidents and take appropriate action to prevent and mitigate security breaches.
• Develop and implement security awareness training programs to educate employees on information security best practices.
• Apply and distribute the Central Information System Security Policy (ISSP) and control the correct application of the ISSP on the perimeter.
• Collaborate with other teams to ensure that security requirements are integrated into system designs and development processes.
• Conduct regular security audits and assessments of third-party vendors and partners to ensure compliance with our security policies and standards.
• Monitor and evaluate emerging threats and vulnerabilities to inform the development of our security strategies and tactics.
• Provide regular reports to senior management on the state of information security within the organization.

Essential Experience, Skills and Qualifications
Hard skills:

• Bachelor's or Master's Degree in Information Security, Computer Science, or a related field.
• At least 3 years of experience in information security and risk management.
• Strong understanding of information security frameworks such as NIST, ISO, or CIS.
• Experience with security tools such as vulnerability scanners, intrusion detection systems, and log analysis tools.
• Strong knowledge of network security technologies such as firewalls, VPNs, and IDS/IPS.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Strong understanding of data protection and privacy regulations such as NDPR, GDPR, CCPA, or HIPAA.
• Knowledge of IT processes and control frameworks such as ITIL.
• Relevant certifications such as CISSP, CISM, or CRISC are a plus.

Soft skills:

• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Exceptional analytical and problem-solving skills
• High degree of initiative, dependability, and ability to work with little supervision
• Excellent organizational and communication skills (both oral and written)
• Inherently demonstrate a high level of integrity and trustworthiness
• The ability to maintain confidentiality in regard to information processed, stored, or accessed by the systems
• The ability to develop knowledge of, respect for, and skills to engage with those of other cultures or backgrounds.