Objectives:

The Information Security Officer is responsible for the oversight and ongoing improvement of the Cyber Security processes in the organization. Additionally, this role will be involved in the maintenance of standard operating procedures as they relate to the day-to-day operations of Security and Information Technology service delivery.

The position is expected to implement global security rules in local country.

Responsibilities:

• Evaluate the country’s security posture regularly
• Adjust the strategy to address emerging risks
• Ensure alignment with overall corporate objectives
• Identify and assess cybersecurity risks at country level
• Ensure that risks are addressed and integrated into the Group’s Cyber Risk Mgmt. framework
• Take immediate action in the event of security incidents or breaches
• Coordinate with local business responsible & CISO to mitigate risks and ensure timely communication
• Provide regular updates to the local Mgmt. Board, Global Cyber Security Management Lead & CISO
• Inform on the progress of security initiatives, incidents, and deviations from security objectives
• Plan and implement awareness initiatives, incl. mandatory employee training & specialized sessions for senior leadership
• Support local business to react much faster on security incidents and advise and suggest secure solution, assess & improve security level in country
• Globally aligned cyber security strategy with highest standards to fulfill compliance needs
• Roll-out internal policies, standards, procedures and instructions
• Participate in internal and external audits

Necesarry Skills:

• Bachelor’s degree in related fields
• Minimum of 4-5 years of experience in management of IT Security
• Advanced level of verbal and written English is a must
• Existing Security Certification (CISSP, CISM, CISA, etc.) or comparable will be plus
• Knowledge of ISO27001/2 will be plus
• Deep understanding of computer systems and networks
• Very good communication with stakeholders and persuasion skills