Information Security Manager CISSP

• Lead the development implementation and maintenance of the companys ISMS based on the ISO 27001 framework.
• Conduct regular risk assessments to identify and prioritize security threats and vulnerabilities.
• Develop and implement security policies procedures and standards to mitigate identified risks.
• Manage and maintain the companys information security controls including access control network security incident response and data security.
• Oversee the implementation and management of security awareness and training programs for employees.
• Conduct regular audits and reviews of the ISMS to ensure its effectiveness.
• Stay uptodate on the latest information security threats vulnerabilities and best practices.
• Collaborate with other departments such as IT HR and Legal to integrate information security considerations into business processes.
• Report to senior management on the status of the information security program.

• Bachelors degree in Information Technology Cybersecurity or related field (Masters degree preferred).
• Minimum of 5 years of experience in information security preferably in a leadership role.
• Good understanding of cloud security architecture security assessments audit standards for the Cloud security threats in the cloud.
• Certified Information Systems Security Professional (CISSP) certification or equivalent experience.
• Strong understanding of the ISO 27001 framework and the information security management process.
• Experience in conducting risk assessments and developing security controls.
• Excellent communication collaboration and problemsolving skills.
• Ability to work independently and manage multiple priorities simultaneously.
• Strong analytical and critical thinking skills.
• Proficient in MS Office Suite and familiarity with security management tools.

information security management,information security,information security management system (isms),financial services,cloud security,architecture,cissp,cybersecurity,risk assessment,security policy,access control,network security,incident response,data security,security awareness,iso 27001,framework,vulnerability management