Information Security and Business Continuity Officer
Core
Lead the design, implementation, and continuous improvement of the Information Security Management System (ISMS) and Business Continuity Management System (BCMS) to ensure compliance and operational resilience.
Role type
Senior Information Security and Business Continuity Officer
Builds
ISMS and BCMS frameworks, risk management initiatives, and security awareness culture
Domain
Information Security / Business Continuity / Compliance
Required skills
ISO 27001, ISO 22301, risk assessment, Business Impact Analysis (BIA), Disaster Recovery (DR) testing, Third-Party Risk Management, GDPR compliance, security policy design, audit coordination
Preferred skills
CISM, CISSP, ISO 27001 LA/LI, ISO 22301 LA/LI, incident management, vulnerability assessments, penetration testing, enterprise security architecture
Technologies
ISO 27001, ISO 22301, ISO 27018, ISO 27701, GDPR
Responsibilities
Design and maintain security and business continuity policies aligned with ISO standards; Lead certification and compliance processes for ISO 27001 and ISO 22301; Conduct security risk assessments and DR testing; Define and analyze KPIs for security and resilience; Develop organization-wide security training programs; Ensure alignment with legal and regulatory requirements.
Seniority
Senior, hands-on IC with strategic oversight