- Lead readiness, surveillance, and maintenance activities for ISO 27001, ISO 27701, NIST CSF, GDPR, DPDPA, CCSS frameworks
- Drive security and privacy awareness programs including training, phishing simulations, and internal communications
- Conduct risk assessments, internal and external audits, and manage remediation processes
- Develop and manage security policies, third-party risk assessments, compliance dashboards, and reporting
Role Responsibilities
- Collaborate with stakeholders to identify, assess, and mitigate security and privacy risks
- Facilitate security assessments for mergers, acquisitions, and third-party engagements
- Mentor infosec team members and promote continuous process improvements and automation
- Communicate effectively across technical and non-technical teams to ensure compliance and security culture
Skills: Information Security, Iso 27001, Security Audits, Cloud Security, Risk Management