Information Security Officer at Alfred & Victoria Associates

JOB DESCRIPTION

The ideal candidate will have at least 5 years of experience in IT with a strong background in information security and risk management and will be responsible for implementing and maintaining our information security program. You will work closely with other teams to ensure that our systems, processes, and data are secure and compliant with regulatory standards.

KEY DUTIES & RESPONSIBILITIES:

• Develop and manage relationships with external software development vendors and partners.
•  Provide regular progress updates and reports to senior management.
• Develop and implement information security policies, procedures, and standards that align with regulatory requirements and industry best practices.
• Conduct regular security assessments to identify potential risks and vulnerabilities and implement controls to mitigate those risks.
• Monitor and investigate security incidents and take appropriate action to prevent and mitigate security breaches.
• Develop and implement security awareness training programs to educate employees on information security best practices.
• Apply and distribute the Central Information System Security Policy (ISSP) and control the correct application of the ISSP on the perimeter.
• Collaborate with other teams to ensure that security requirements are integrated into system designs and development processes.
• Conduct regular security audits and assessments of third-party vendors and partners to ensure compliance with our security policies and standards.
• Monitor and evaluate emerging threats and vulnerabilities to inform the development of our security strategies and tactics.
• Provide regular reports to senior management on the state of information security within the organization.                   

ESSENTIAL EXPERIENCE, SKILLS AND QUALIFICATIONS

Hard skills

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.
• At least 3 years of experience in information security and risk management.
• Strong understanding of information security frameworks such as NIST, ISO, or CIS.
• Experience with security tools such as vulnerability scanners, intrusion detection systems, and log analysis tools.
• Strong knowledge of network security technologies such as firewalls, VPNs, and IDS/IPS.
• Experience with cloud platforms such as AWS, Azure, or GCP.
• Strong understanding of data protection and privacy regulations such as NDPR, GDPR, CCPA, or HIPAA.
• Knowledge of IT processes and control frameworks such as ITIL.
• Relevant certifications such as CISSP, CISM, or CRISC are a plus.

Soft skills

• Excellent problem-solving and analytical skills.
• Strong communication and collaboration skills.
• Exceptional analytical and problem-solving skills
• High degree of initiative, dependability, and ability to work with little supervision
• Excellent organizational and communication skills (both oral and written)
• Inherently demonstrate a high level of integrity and trustworthiness
• The ability to maintain confidentiality in regard to information processed, stored, or accessed by the systems
• The ability to develop knowledge of, respect for, and skills to engage with those of other cultures or backgrounds