ISO Security Officer

General Description

Provide technical leadership in the creation, establishment, and maintenance of the information technology/security risk framework, processes, and controls, taking into consideration the overall business strategy, legal/regulatory requirements, and other best practices. Perform security assessment to applications, systems, and vendors. Manage the various risks, which may threaten the very success of the organization and propose methodologies to eliminate or minimize them.

Essential Duties and Responsibilities

· Leads the security investigations related to applications, user account, and vendors.

· Manage, review, analyze, design and support Incident Response (End-to-end) processes according to industrys best practices and applicable regulations.

· Align Incident Response Processes with legal, regulatory, and contractual requirements that conforms with security framework, standards, and applicable regulations.

· Implement regulatory changes to processes in the corporation related to cybersecurity incidents.

· Ability to explain security controls, regulatory requirements, and guidance to security management.

· Discuss and follow up action plans to address recommendations from internal processes. Provides periodic status reports, including outstanding issues.

· Facilitates and monitors performance of remediation tasks, changes related to mitigation factors & reports on findings.

· Essential Duties and Responsibilities (cont.)

· Provided feedback during the Development, review, and update of Policies, Standards, and Procedures related to Information Security.

· Create concise and comprehensive reports related to Incident Response Metrics, including recommendations for addressing any identified control weaknesses in the response process.

· Promote awareness of applicable regulatory standards, upstream risks, and industry best practices across the company.

· Project Management/Coordination experience is a must.

· Escalate issues to senior leadership outstanding issues that requires immediate action from different stakeholders of the company.

· Collaborate with technical teams on cyber incidents/events.

· Other duties and responsibilities.

Education

Bachelor's Degree in Computer Engineering, Computer Science, Information Systems or related fields

Experience

Three+ (3) years of Incident Response/Handling and cloud related experience in a complex technology environment.

Certifications / Licenses

Certifications and Licenses are preferred but no required.

Knowledge, Skills, and Abilities (KSA's)

· Strong business acumen: ability to understand the needs and concerns of business stakeholders and colleagues and respond promptly and effectively to stakeholder requests. Ability to conduct analysis on work procedures, business results and recommends changes to improve the effectiveness of the business's management.

· Strong technical acumen: knowledge of Information Security and Information Technology concepts. Ability to write technical instructions using programs and technology. Robust knowledge of applicable local and federal laws, regulations, and guidelines.

· Communication skills: effectively interact with internal and external stakeholders. Ability to foster trusting relationships with colleagues and clients. Highly develop written and verbal communications skills, strong ability to communicate ideas (storytelling). Presents numerical data effectively. Superior communication and interpersonal skills. Excellent report-writing and presentation skills. Polished in preparing presentations, summaries, and reports for all audiences.

· Analytical skills: Stays focused on main issues, prevents irrelevant issues or distractions from interfering with timely completion of assignments. Collects, research and complements data; Synthesizes complex or diverse information. Demonstrates attention to detail; Applies design principles; Generate creative solutions. Strong quantitative, research and analytical skills. Experience with data analysis, persuasive and informative writing, workload management, and process management.

· Problem Solving: Identifies and resolves problems in a timely manner; Develops alternative solutions.

· Project Management: Ability to prioritize and work with multiple projects and tasks with minimum supervision; self-direct and task switch between strategic and tactical initiatives regularly. Capacity to achieve results according to plan ensuring the expected quality. Excellent organization capacity to define priorities, meet deadlines, and flexible to change. Knowledge on