Maintain and continuously improve the organization's ISMS in alignment with ISO/IEC 27001 .
Coordinate internal and external ISO audits , including audit preparation, evidence collection, and closure of observations.
Conduct information security risk assessments and maintain the risk register and risk treatment plans.
Develop, review, and maintain information security policies, procedures, standards, and guidelines .
Coordinate the implementation and monitoring of ISO 27001 Annex A controls .
Maintain ISMS documentation, control evidence, compliance records, and audit trackers.
Conduct periodic user access reviews, asset reviews, and security compliance checks .
Support vendor/third-party security assessments and compliance reviews.
Coordinate information security incident reporting, investigation, corrective actions, and documentation .
Support Business Continuity and Disaster Recovery activities.
Conduct and coordinate employee information security awareness and training programs , including phishing awareness, password security, social engineering, data protection, and acceptable-use practices.
Monitor compliance with organizational security policies and report deviations.
Coordinate with IT, HR, Operations, and other internal teams for implementation of security controls.
Track corrective and preventive actions and ensure timely closure.
Overview The Information Security Lead is a key member of the Business Information Security Office, serving as a trusted security advisor and change agent, enabling secure digital transformation across multiple enterprise business domains (e.g., Supply Chain & Operations, Consumer & Commercial, Finance, HR, Enterprise Platforms). ...
... and at least 5 years of substantive vulnerability-management and incident-response experience.- Hands-on ownership of an ISO/IEC 27001-aligned ISMS, audits, security risk/control assurance, policy governance, audit remediation, third-party risk and executive reporting.- Hands-on security across AWS, Azure and Microsoft 365, ...
... Security or Cybersecurity teams and translate their findings into practical actions. - Business Partnership: Build strong relationships across Finance, DD&IT and Information Security, constructively challenging where necessary while helping stakeholders achieve business objectives securely. - Executive Communication: Translate ...
... and crowd-control activities - Assist guests with information regarding hotel facilities and services in a professional and helpful manner - Monitor CCTV and security systems and respond promptly to any suspicious activity or security concerns - Maintain accurate records of incidents, observations, and daily security activities ...
... and crowd-control activities - Assist guests with information regarding hotel facilities and services in a professional and helpful manner - Monitor CCTV and security systems and respond promptly to any suspicious activity or security concerns - Maintain accurate records of incidents, observations, and daily security activities ...
... programs, including scoping, vendor selection, cadence, and remediation. Set cloud security posture standards across our AWS multi-region deployments and direct security-engineering execution within the Platform team. - The team — Hire and manage a Senior Manager of Information Security & Compliance. Provide dotted-line leadership ...
... security team to ensure preparedness. - Utilize CCTV systems and other security technologies to monitor the Hotel premises. - Maintain accurate records of security-related activities. - Manage access control systems and ensure the security of entry points. - Issue and monitor access cards for coworkers, tenants, and authorized ...
... security team to ensure preparedness. - Utilize CCTV systems and other security technologies to monitor the Hotel premises. - Maintain accurate records of security-related activities. - Manage access control systems and ensure the security of entry points. - Issue and monitor access cards for coworkers, tenants, and authorized ...
... programs across the organization.- Manage security metrics, compliance dashboards, and executive reporting.- Ensure continuous improvement of the organization's security https://jobeax.com/link/4wuE6yVIcoTQzJ1C Skills & Expertise : - 6+ years of experience in Information Security and Compliance.- Strong expertise in ISO 27001, ...
... Risk, and Compliance team and will report to the Senior Manager, Cybersecurity Governance, Risk & Compliance. This position will be responsible for assessing security risk, establishing security standards, and ensuring compliance against those standards across all disciplines of the information security domain that support ...