Information Security Officer

Job Summary: The Cyber Security Officer is responsible for protecting the organization's networks, systems, and digital assets from cyber threats. They will develop and implement security measures, policies, and procedures to ensure the confidentiality, integrity, and availability of information. The Cyber Security Officer will also monitor and respond to security incidents, conduct risk assessments, and provide training and education to employees on cyber security awareness. They will collaborate with internal teams and external vendors to ensure compliance with regulatory requirements and best practices.

Responsibilities:

1. Develop and implement an overall cyber security strategy and framework aligned with the organization's goals and objectives.
2. Conduct regular vulnerability assessments and penetration tests to identify potential security risks.
3. Develop and maintain incident response plans to minimize the impact of security breaches and ensure timely resolution.
4. Perform risk assessments and develop risk mitigation strategies to protect the organization's digital assets.
5. Provide guidance and support to IT teams in the design and implementation of secure architectures and systems.
6. Stay updated on the latest cyber security threats, technologies, and best practices to inform security policies and procedures.
7. Develop and deliver training and education programs to enhance cyber security awareness among employees.
8. Collaborate with internal teams and external vendors to ensure compliance with regulatory requirements and industry standards.
9. Prepare and present reports on cyber security incidents, trends, and risk assessments to stakeholders.
10. Conduct Cyber Security Internal audits for organization projects and support functions.

Requirements:

1. Proven experience working as a Cyber Security Officer or in a similar role.
2. Strong knowledge of cyber security principles, best practices, and technologies.
3. Experience with security frameworks and compliance requirements, such as ISO 27001, NIST, and GDPR.
4. Familiarity with network security protocols, firewalls, VPNs, and other security technologies.
5. Knowledge of vulnerability assessment and penetration testing tools and techniques.
6. Experience in incident response and managing security incidents.
7. Strong analytical and problem-solving skills.
8. Excellent communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
9. Ability to work collaboratively with internal teams and external vendors.
10. Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM) are a plus.

Work Environment: The Cyber Security Officer will primarily work in an office environment, with occasional travel to other company locations or vendor sites. They may occasionally be required to work outside of normal business hours to monitor and respond to security incidents.