Information Security office Manager

Role overview

Information security responsibilities

• Design and plan implementation of the information security system in alignment with organisational strategy and secure Public Prosecutor approval.
• Develop and update security policies in line with international and local standards.
• Maintain and develop the security system, its data accuracy, and integration of periodic results and operational developments.
• Assess controls, compliance, gaps, and vulnerabilities, and recommend security enhancements.
• Protect information assets and business continuity during emergencies.
• Evaluate technical, administrative, and physical safeguards for information and systems.
• Ensure compliance with security policies, standards, and legislation.
• Recommend security improvements, control updates, and risk mitigations for approval.
• Monitor security and confidentiality requirements in contracts with external parties.
• Develop and deliver information security awareness and training with HR, and measure impact.
• Oversee audit reports covering findings, risks, and proposed recommendations.
• Manage IT facilities and server security against environmental conditions, disasters, or damage.

Office management responsibilities

• Lead staff as a cohesive team and develop office policies and procedures.
• Prepare, review, implement, and update office procedures and methodologies according to best practices.
• Update the office organisational structure and job descriptions with relevant departments.
• Evaluate staff performance and create development plans to build skills and prepare staff for leadership roles.
• Prepare the office annual operational plan and budget.
• Manage implementation of the office internal communication methodology.
• Ensure office staff follow information security policies, procedures, and guidelines.
• Ensure office procedures, initiatives, and projects align with information security controls and standards.
• Review internal and external audit results and ensure timely corrective actions.

Qualifications

• Bachelor’s degree specializing in information; the source does not provide the complete subject or degree wording.
• Knowledge of information security and cybersecurity policies and procedures.
• Knowledge of ISO 27001, PCI-DSS, and data protection regulations such as GDPR.
• Skills in analysis, synthesis, and inference.

Schedule

• Full-time schedule.

Compensation

• Monthly salary is unspecified.