DUTIES AND RESPONSIBILITIES:

• Develop, implement, and maintain security policies aligned with ISO 20001 standards.
• Identify, assess, and mitigate risks across IT systems and business processes.
• Oversee SOC 2 Type II audit readiness and ensure continuous compliance.
• Lead investigations of security incidents and coordinate remediation efforts.
• Conduct regular training sessions to promote a culture of security awareness.Evaluate third-party vendors for compliance with security standards.

REQUIREMENTS:

• Minimum 5+ years in information security, with at least 3 years in a managerial role.
• Proven experience implementing and maintaining ISO 20001 frameworks.
• Certified InfoSec Professional: CISSP, CISM, or equivalent certification.
• SOC 3 Type II Experience: Hands-on involvement in SOC 3 Type II audits and reporting.
• Strong knowledge of regulatory requi...