Information Security Officer

We are seeking a dedicated and experienced Information Security Officer to lead and protect our organization’s information security assets. The Information Security Officer will be responsible for the development, implementation, and continuous improvement of a comprehensive security framework designed to protect the confidentiality, integrity, and availability of company information systems and data. This is a strategic and hands-on role requiring collaboration across departments to foster a culture of security awareness and compliance.

Responsibilities

Information Asset Governance:

• Identify, classify, and manage critical information assets
• Establish ownership and accountability frameworks
• Implement data lifecycle management policies
• Define metrics to measure information protection effectiveness

Process Development:

• Design security processes that balance protection with usability
• Ensure standardized risk assessment methodologies
• Establish incident handling and investigation procedures
• Develop business continuity planning for critical information
• Support information security audits and assessments

People and Culture:

• Foster a security-aware culture through engagement and training
• Build partnerships with department heads and information owners
• Communicate security concepts in business-relevant terms
• Guide teams in implementing security practices in daily operations

Requirements

• Bachelor's degree in a relevant field
• Information security governance certifications
• 3+ years in information security
• Strong understanding of information asset management
• Experience developing security processes and documentation
• Excellent policy writing skills
• Knowledge of ISO 27001 framework
• Understanding of Middle East regulatory requirements
• Proven ability to build consensus and influence culture
• Experience leading cross-functional initiatives
• Strong communication skills at all organizational levels