Information Security Officer

An NGO is seeking an experienced Information Security Officer to manage and improve its Information Security Management System (ISMS), security policies, risk management and compliance with ISO 27001 standards.

• Coordinate and improve the local ISMS in line with ISO 27001.
• Develop and update information security policies and procedures.
• Coordinate security measures and risk-management activities.
• Manage security incidents, investigations and evidence.
• Monitor security risks, controls and programme effectiveness.
• Support internal, certification and surveillance audits.
• Prepare ISMS and security reports for management and HQ/CISO.
• Provide staff training and guidance on information security.
• Support projects with information-security requirements.

• University degree in Computer Science, Information Technology or a related field.
• CISSP certification required.
• Minimum 5 years’ experience in information security or a related role.
• Knowledge of ISO 27001, risk and vulnerability management, and audits.
• ISO 27001, CISM or similar certification is an advantage.
• Strong communication, reporting and interpersonal skills.
• High integrity, confidentiality and discretion.

None