Information Security Officer
Core
Plan, implement, and maintain information security controls; monitor, investigate, and respond to security threats and incidents; support vulnerability management and secure software development.
Role type
mid-level information security officer (regional)
Builds
security controls, incident response capabilities, security awareness programs, compliance assessments
Domain
cybersecurity, risk management, compliance
Required skills
vulnerability management, application security, incident response, identity and access management, cloud security, security auditing, compliance frameworks (ISO 27001, PCI DSS, SSAE18), third-party risk management
Preferred skills
regional or global security program experience, regulated environment experience, emerging cybersecurity trends knowledge
Technologies
Windows, Linux, TCP/IP, DLP, IDS/IPS, content filtering, file integrity monitoring
Responsibilities
Plan, implement, and maintain information security controls and safeguards; Monitor, investigate, and respond to security threats and incidents; Support vulnerability management activities and penetration testing initiatives; Facilitate secure software development practices and application security assessments; Deliver security awareness and education programs across the organization; Develop and report security metrics, dashboards, KPIs, and KRIs
Seniority
Mid-level, hands-on IC
