About the job
Your impactful mission. You will...
- Establish and implement comprehensive organizational information security processes to meet business, regulatory, legislative, and contractual obligations.
- Oversee internal and external ISMS audit procedures, ensuring the effectiveness of controls and corrective actions in collaboration with various stakeholders.
- Conduct gap analyses, manage compliance readiness, and monitor compliance activities for ISO/IEC 27001, PCI DSS, and other regulatory security audits.
- Coordinate external security audits and assessments, developing and executing remediation plans as necessary.
- Identify, evaluate, and monitor information security risks while recommending appropriate mitigation strategies.
- Design, implement, and lead an extensive organizational information security awareness training program.
- Manage security requirements with third-party vendors, ensuring due diligence in product and service providers and embedding information security clauses in contracts.
- Develop and maintain information security policies, procedures, and related documentation.
- Analyze and communicate information security requirements stemming from legislative and regulatory mandates across different jurisdictions.
- Act as project manager or lead on various security projects.
- Continuously enhance knowledge to adapt to changes in the company's regulatory environment and requirements.

