The position helps Tasnee implement, facilitate, and maintain ISO27001 and local cybersecurity regulations and KSA NCA requirements. Compliance with the standard by developing or maintaining an information security management system (ISMS). This covers information security (IS) objectives, IS risk management and development of ISMS roles & responsibilities, controlling documentation, controlling records, ISMS performance evaluation, IS internal & external audits, IS management review, and the continual improvement of ISMS.
Role responsibilities:
Lead and manage the development and maintenance of information security management policies and procedures.
Drive information security upgrade and continuous improvement projects.
Develop and maintain a risk register and risk management framework.
Perform internal audits for information security and service management systems.
Lead and manage the development of service continuity plans and their related policies and procedures.
Work as a process manager for one or more SMS and ISMS processes
Host, coordinate and facilitate IT-related external and third-party audits.
Control ISMS documentation and records.
Lead or coordinate corrective and preventive actions post to major incidents, audit findings, or any other means.
Produce and maintain ISO27001 required documents and records
Conduct and manage IT Disaster Recovery Exercise.
Qualifications and Requirements:
Bachelor’s degree in Computer Science or Information System.
Experience: +4 years
Certified Information Security Manager – CISM / Certified Information Security
Good knowledge of information security management policies & procedures and ISO27001
Fair knowledge of COBIT and ISO20000 is a plus
Hands-on experience in implementing and maintaining an information security management system
Negotiation / Communication Skills
Planning and Organizing
English Fluency (written & spoken)
You will be redirected to the company website to apply for this position