Information Security Officer
Core
Maintain and improve the Information Security Management System (ISMS) aligned with ISO 27001 and NIS2, oversee technical security controls, and manage incident response and risk assessments.
Role type
Senior Information Security Officer (GRC & Technical)
Builds
Security policies, risk mitigation strategies, incident response plans, and security operations (SIEM, IAM, DLP)
Domain
Cybersecurity, Compliance, Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
ISO 27001, NIS2, NIST CSF, GDPR, ISO/IEC 27701, Firewall administration, Microsoft 365 Security & Compliance (Purview, Priva, Defender), Azure Security (Defender for Cloud, Sentinel, RBAC), SIEM, EDR, DLP, IAM, Business Impact Analysis (BIA), Third-party risk management, Security awareness training
Preferred skills
CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer, Azure Security Engineer, Information Protection Administrator, CompTIA Security+, CySA+
Technologies
Microsoft Defender for Cloud, Azure Sentinel, Microsoft Purview, Microsoft Priva, Microsoft Defender for Endpoint, Microsoft Defender for Identity, SIEM, EDR, DLP, IAM
Responsibilities
Maintain and assess ISMS; Draft and update security policies; Oversee technical security controls; Conduct risk assessments and define mitigation strategies; Participate in incident response; Collaborate on compliance and privacy regulations; Conduct Business Impact Analyses; Support third-party risk management; Promote security-by-design; Deliver security training; Monitor security metrics.
Seniority
Senior, hands-on IC
