Information Security Officer

Our client is engaged in service and product delivery in various geographies through several country offices.
All our endeavours at these locations are strictly controlled for compliance with PCI DSS, ISO 27001 and various local requirements and regulations.
Ongoing effectiveness of these controls and success in compliance assessments always arises as the product of persistent and diligent security management, and appropriate effort by all employees at all times through the year.
The role of Information Security Officer exists primarily to manage, monitor, supervise and mentor on all aspects infosec and infosec compliance within the company.

The duties and responsibilities of an Information Security Officer include:
-Distributing security policies and related documents and ensuring staff are aware of latest versions, and reading them as they become available.
-Conducting periodic reviews of Polices and other Info Sec controlled documents in conjunction with other stakeholders.
-Authorising the creation, modification, and deletion of User accounts, in conjunction with the relevant Line Manager and Asset Owner and in accordance with the requirements of our InfoSec policies.
-Maintaining a Vulnerability Management Programme, including mechanisms to identify new vulnerabilities and changes in the threat landscape.
-Maintaining a program to monitor service providers’ PCI DSS compliance status at least annually and the extent to which each is contributes to or manages our ongoing compliance.

Key Skills
-Understanding and complying with all Company policies, processes and procedures, including those for Information Security and Performance Management.
-Working with CISO, team leaders and team members to develop, evolve and continuously improve operations processes, procedures, runbooks and standards.
-Working as part of a distributed team; and
-Participating in meetings and performing other duties as assigned by CISO.