information security officer

Altitude-Recruitment Limited

PermanentBased in Milton Keynes£50,000 pa - £60,000 paInformation Security Officer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than 350 institutions worldwide, their software empowers universities and venues to run smarter, faster, and more collaboratively. From bustling campuses to dynamic corporate environments, their technology adapts to the rhythm of each organisation - helping them thrive in a fast-changing world.They are more than just software. They are a team of passionate problem-solvers, innovators, and collaborators who care deeply about their customers and each other. Their culture is built on empowerment, community, and continuous growth. They believe in giving people the tools, support, and freedom to do their best work - and have fun while doing it.Joining our client means being part of a purpose-driven business where your ideas matter, your development is supported, and your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities:Strategic (30%) <ul> <li>Define technical security architecture and standards across multi-cloud SaaS platforms </li><li>Embed security into product development lifecycle and roadmap planning </li><li>Conduct threat modelling and risk assessments for new features and system changes </li><li>Evaluate and recommend security technologies and tools </li></ul> Operational (40%) <ul> <li>Manage security environments across Azure and AWS infrastructure </li><li>Coordinate security incident response and vulnerability remediation </li><li>Oversee security monitoring, alerting, and detection capabilities </li><li>Manage vulnerability assessment and penetration testing programs </li><li>Maintain identity and access management controls </li></ul> Compliance & Assurance (30%) <ul> <li>Maintain ISO27001 certification and manage audit cycles </li><li>Ensure PCI/DSS compliance for payment processing systems </li><li>Manage GDPR compliance across all products and operations </li><li>Complete HECVAT and security questionnaires for higher education tenders </li><li>Support sales and customer success with security documentation and evidence </li><li>Act as primary security contact for customers and prospects </li></ul> Essential Requirements:<ul> <li>Substantial information security experience in SaaS/cloud software environment (ISV or B2B software preferred) </li><li>Proven track record managing ISO27001 certification and compliance </li><li>Practical GDPR implementation experience in software products </li><li>PCI/DSS compliance experience with payment processing systems </li><li>Strong understanding of cloud security (Azure and/or AWS) </li><li>Application security and secure development lifecycle knowledge </li><li>Security incident management and cross-functional response coordination </li><li>Excellent communication skills - able to translate technical security for commercial and executive audiences </li><li>Experience supporting tender responses and client security assurance </li></ul> Preferred:<ul> <li>Professional certifications: CISSP, CISM, CISA, or equivalent </li><li>Higher education sector experience </li><li>Multi-tenant SaaS architecture security experience </li><li>DevSecOps and CI/CD security integration knowledge </li><li>Security frameworks: NIST, CIS Controls, OWASP </li><li>Multi-jurisdictional data protection knowledge </li><li>Enterprise sales cycle support experience </li></ul> Key Attributes:<ul> <li>Strategic thinker who can balance security with business needs </li><li>Pragmatic approach to security implementation </li><li>Detail-oriented with strong organisational skills </li><li>Collaborative and able to influence across teams </li><li>Proactive in identifying risks and improvement opportunities </li><li>Comfortable in fast-paced, dynamic environment </li></ul> Our client have created a welcoming office environment, with well-stocked kitchens offering free breakfast, fresh fruit, hot and cold drinks, and a range of tuck shop goodies to keep you fuelled throughout the day. They are an equal opportunity employer, fostering diversity and committed to creating an inclusive environment for all employees. Please let us know if we need to make reasonable adjustments to our process, please let us know about how we can best support you and make the adjustments that may be needed. Altitude-Recruitment Limited acting as an Employment Agency and Employment Business.

Information Security Officer

Lesha Bank

<div>
 
 Lesha Bank is searching for the greatest talent and brightest minds to contribute to the current growth phase at our bank. We are looking for top-tier individuals who are passionate and hungry to add value from day one. Every day at Lesha is different, presenting a new challenge with the opportunity to contribute and grow. We are looking for an Information Security Officer (ISO).
 
 
 
 
 
 
 Role Purpose
 
 
 
 The Information Security Officer (ISO) will develop, implement, and oversee the bank&rsquo;s information security strategy, policies, and controls. The ISO ensures that the bank&rsquo;s data, systems, applications, and infrastructure are safeguarded against internal and external threats while complying with local regulatory requirements (QCB, QFCRA, NCSA-Q) and international standards (ISO 27001, NIST, GDPR, PCI-DSS).
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 Governance &amp; Compliance
 
 
 <ul>
 <li>
 Establish, maintain, and enforce the bank&rsquo;s information security framework in alignment with QCB, QFCRA, and local cybersecurity regulations.
 </li>
 <li>
 Ensure compliance with international standards (ISO 27001, NIST CSF, COBIT, PCI-DSS) and conduct regular gap analyses.
 </li>
 <li>
 Prepare and present security risk assessments and reports to senior management, regulators, and the Board Risk Committee.
 </li>
 <li>
 Design, implement, and enforce security policies, procedures, and controls to safeguard the bank&rsquo;s infrastructure and data.
 </li>
 </ul>
 
 
 
 
 
 Security Operations
 
 
 <ul>
 <li>
 Oversee Security Operations Center (SOC) activities, incident response, and threat intelligence monitoring.
 </li>
 <li>
 Develop and maintain business continuity, disaster recovery, and incident response plans.
 </li>
 <li>
 Implement and monitor Data Loss Prevention (DLP), intrusion detection/prevention (IDS/IPS), endpoint protection, and other security tools.
 </li>
 <li>
 Lead investigations of security breaches, develop mitigation strategies, and ensure lessons learned are integrated into policies and processes.
 </li>
 <li>
 Conduct regular staff training on security awareness, best practices, and incident procedures.
 </li>
 <li>
 Collaborate with IT and business teams to continuously enhance security culture and controls.
 </li>
 </ul>
 
 
 
 
 
 Risk Management
 
 
 <ul>
 <li>
 Conduct enterprise-wide risk assessments for systems, applications, vendors, and third-party service providers.
 </li>
 <li>
 Identify vulnerabilities and ensure timely remediation through patch management and secure configurations.
 </li>
 <li>
 Partner with IT and business units to integrate security into new products and initiatives.
 </li>
 </ul>
 
 
 
 
 
 Vendor &amp; Technology Oversight
 
 
 <ul>
 <li>
 Evaluate and approve technology vendors, outsourcing partners, and cloud solutions for security compliance.
 </li>
 <li>
 Manage penetration tests, vulnerability assessments, and external audits.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Information Security, Computer Science, or a related field. Master&rsquo;s degree preferred.
 </li>
 <li>
 Professional certifications: CISSP or CISM required; CISA and ISO 27001 Lead Implementer preferred.
 </li>
 <li>
 Cloud security certifications (e.g., CCSP, AWS Security) are a plus.
 </li>
 <li>
 8&ndash;12 years in information security, with at least 5 years in the financial-services sector.
 </li>
 <li>
 Strong background in banking systems, digital channels, payment systems, and regulatory compliance.
 </li>
 <li>
 Proven experience engaging with regulators (QCB, QFCRA, CMA, or equivalent).
 </li>
 <li>
 Proven experience in implementing SIEM solutions and managing SOC teams.
 </li>
 <li>
 Expertise in cybersecurity frameworks, network security, cryptography, and identity &amp; access management.
 </li>
 <li>
 Strong risk management, analytical, and problem-solving skills.
 </li>
 <li>
 Excellent communication and stakeholder-management skills, capable of engaging effectively with regulators, auditors, and the Board.
 </li>
 <li>
 Ability to influence across departments, drive a culture of security, and lead change initiatives without direct authority.
 </li>
 </ul>
 
 
</div>

Information Security Officer (ISO)

Starlink Qatar

<div>
 
 Job Responsibilities :
 
 
 
 
 
 
 Data Security Engineering:
 
 
 
 &bull; Design and implement data protection controls across enterprise, cloud environments and Artificial Intelligence Solutions.
 
 
 &bull; Deploy and manage solutions such as Data Loss Prevention (DLP), data masking, and tokenization.
 
 
 &bull; Collaborate with application and infrastructure teams to embed security into data lifecycle management.
 
 
 &bull; Implement and manage data discovery and classification tools to identify, categorize, and label sensitive data across the organization.
 
 
 &bull; Continuously monitor data security posture and produce regular compliance and risk reports.
 
 
 &bull; Assist the incident response team to Investigate and respond to data security incidents, including insider threats and breaches.
 
 
 
 Cloud Data Security:
 
 
 
 &bull; Implement and manage data protection controls in GCP and Azure.
 
 
 &bull; Secure databases and data lakes.
 
 
 &bull; Configure encryption at rest, in transit, and in use, with BYOK strategies.
 
 
 &bull; Deploy cloud-native data discovery and classification solutions.
 
 
 &bull; Manage secrets management and ensure secure access to data storage systems.
 
 
 &bull; Implement controls for AI data governance.
 
 
 
 Cryptography:
 
 
 
 &bull; Define and enforce cryptographic practices and key management standards.
 
 
 &bull; Manage enterprise encryption practices for data at rest, in transit, and in use.
 
 
 &bull; Ensure compliance with organizational and industry cryptographic standards.
 
 
 
 Data Privacy:
 
 
 
 &bull; Ensure compliance with privacy regulations (GDPR, HIPAA, PDPPL).
 
 
 &bull; Embed privacy-by-design principles and requirements into technical controls.
 
 
 &bull; Drive data classification and governance programs to safeguard personal and sensitive information.
 
 
 
 Database Security:
 
 
 
 &bull; Secure structured and unstructured data repositories, including relational and NoSQL databases.
 
 
 &bull; Implement database activity monitoring (DAM) and user access controls.
 
 
 &bull; Perform regular security reviews and hardening of database systems.
 
 
 Collaboration and Governance:
 
 
 &bull; Collaborate with other stakeholders on data protection strategies.
 
 
 &bull; Ensure compliance with Qatar&rsquo;s NCSA framework and international standards.
 
 
 &bull; Conduct data security assessments for vendors and third-party integrations.
 
 
 &bull; Review and approve data sharing agreements.
 
 
 &bull; Define and track data security KPIs and metrics.
 
 
 &bull; Maintain Data security dashboards for continuous monitoring.
 
 
 &bull; Stay current with emerging threats, technologies, and industry best practices.
 
 
 
 
 
 
 Qualifications
 
 
 
 
 
 <ul>
 <li>
 8+ years of hands-on experience in IAM engineering, administration, and PAM implementation.
 </li>
 <li>
 Arabic Speaker is preferred
 </li>
 <li>
 Hands-on experience implementing and managing enterprise IAM platforms. Deep technical expertise in GCP IAM (Cloud Identity, Workforce/Workload Identity Federation, IAM policies, service accounts, Identity-Aware Proxy). Proven experience with Privileged Access Management (PAM) solutions and securing privileged accounts. Experience with Identity Governance and Administration (IGA) platforms and access certification. Strong background in Active Directory architecture, administration, and security hardening.
 </li>
 <li>
 Experience integrating IAM with enterprise applications, SaaS platforms, and APIs.
 </li>
 </ul>
 
 
 
 
 
 Education:
 
 
 
 
 
 
 &bull; Bachelor&rsquo;s degree in computer science, Information Security, or related field.
 
 
 Certifications:
 
 
 &bull; CISSP, CCSP, Azure Security Engineer, GCP Professional Cloud Security Engineer, CyberArk Certified Trustee/Defender, SailPoint Certified IdentityNow / IdentityIQ Professional
 
 
 &bull; Cloud security certifications (GCP, Azure, or AWS Security Specialty) - preferred.
 
 
 Required Skillsets:
 
 
 &bull; Hands-on experience with leading enterprise IAM and IGA platforms.
 
 
 &bull; Experience in Managing PAM Solution.
 
 
 &bull; Deep technical expertise in Azure IAM (Entra ID, Conditional Access, PIM, MFA, Entitlement Management).
 
 
 &bull; Experience in Configuring and Managing Cloud IDP for hybrid cloud platforms.
 
 
 &bull; Experience in securely managing the service account life cycle.
 
 
 &bull; Experience in Implementing Role-Based Access Control (RBAC) frameworks and designing custom IAM roles and permission sets.
 
</div>

Information Security Officer - Data Security Specialist

aQovia

<div>About Aqovia:
At the Intersection of Innovation and Impact, introducing Aqovia. Aqovia is an international technology firm dedicated to creating tangible value through the power of AI, data-driven, and bespoke software solutions and services.
Our unique approach extends beyond traditional service and solutions delivery, we strategically invest in and nurture a diverse portfolio of promising companies operating across vital sectors including; financial services, health, infrastructure management, sustainability, education, and business intelligence.
This commitment to fostering innovation across a broad spectrum allows Aqovia to stay at the cutting edge, delivering transformative solutions and creating significant impact. For our clients and strategic partners.
Job Description:
Aqovia is seeking a Security Officer to lead and enhance our Information Security Management System (ISMS) and strengthen our global security posture. This role is responsible for ensuring compliance and accreditation with relevant international security standards and frameworks.
You will oversee security governance, risk management, and operational security processes, ensuring the protection of our platforms, data, and services, including fintech and cloud-based solutions used across our client base.
As Aqovia continues to scale, this role will naturally evolve with the organisation. The successful candidate will have the opportunity to grow into expanded leadership responsibilities, with potential progression toward a CISO-level or equivalent senior security leadership position as our security function matures.
Key Responsibilities:<ul><li>
Oversee the organisation&rsquo;s security infrastructure, governance, and operational security across all operating territories (currently Pakistan, UAE, and UK), including all client engagements.</li><li>
Author, review, and maintain comprehensive security policies, procedures, and standards aligned to recognised frameworks such as ISO 27001, NIST CSF and OWASP ASVS..</li><li>
Conduct regular risk assessments, audits, monitoring and compliance reviews and reports to meet international and regional regulatory expectations.</li><li>
Perform security awareness training for employees including during both onboarding and on an ongoing basis.</li><li>
Ensure achievement and renewal of all necessary security accreditations including ISO 27001, Cyber Essentials and PCI-DSS.</li><li>
Manage corrective action plans and lead remediation efforts for identified security risks.</li><li>
Perform due diligence for supply chain and vendor security, including third-party risk assessments for partners in Pakistan, UAE, and the UK.</li><li>
Produce SOC2 reports.</li><li>
Collaborate closely with engineering, delivery, and client teams to improve overall security maturity and awareness across the organisation with a DevSecOps approach.</li><li>
Monitor emerging cybersecurity threats, technologies, and compliance requirements to proactively enhance the security framework.</li><li>
Support security requirements for cloud, SaaS, fintech, and platform-based deployments across multiple markets.</li></ul>
Qualifications:<ul><li>
Significant experience in information security, ideally in fintech, telecom, digital platforms, or technology services.</li><li>
Proven experience implementing ISO27001 and securing accreditation in an agile software development environment.</li><li>
Familiarity with, and commitment to, a DevSecOps approach to software security..</li><li>
Demonstrate understanding of cyber security frameworks such as NIST CSF or Cyber Essentials and web application security frameworks such as OWASP ASVS..</li><li>
Strong knowledge of assurance and auditing frameworks, especially SOC2.</li><li>
Demonstrated experience in developing and maintaining information security policies and operational security procedures.</li><li>
Experience leading risk management initiatives and managing corrective action plans.</li><li>
Familiarity with third-party risk management and supply chain security.</li><li>
Strong stakeholder management and the ability to partner effectively with cross-functional and international teams.</li><li>
Professional certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor are preferred.</li><li>
Broad technical understanding across Cloud, SaaS, SDLC, Identity &amp; Access Management (IAM), networking, and vulnerability management.</li></ul>
Skills:<ul><li>
Excellent communication skills, with the ability to articulate risk and security concepts to both technical and non-technical audiences.</li><li>
Strong analytical, investigative, and problem-solving abilities.</li><li>
Ability to work collaboratively and lead initiatives in a fast-paced, multi-regional environment.</li><li>
High level of integrity, discretion, and professionalism in handling sensitive information.</li></ul> 
 
Joining Aqovia means:<ul><li>
Making a real difference: You'll be part of a team developing solutions that empower businesses while contributing to sustainable practices.</li><li>
Growth opportunities: We invest in our employees' development and offer a path for career advancement.</li><li>
Collaborative culture: We value teamwork, open communication, and a supportive environment.</li><li>
Competitive benefits package: TBC and discussed with the talent team</li></ul>
If you're a problem-solver who thrives in a fast-paced environment and shares our commitment to positive impact, we encourage you to apply!
Equal Opportunity Employer:
At Aqovia, we believe in the strength of diversity. We strive to reflect the varied markets we serve and foster an inclusive culture where everyone feels welcome, valued, and empowered to be their authentic selves. As an equal opportunity employer, we are committed to embracing all forms of diversity across our organisation.</div>

IT Security Officer

Indigo Heights hotel

We are looking for a skilled and reliable IT Officer to manage and support our organization&rsquo;s IT systems and infrastructure. The ideal candidate will ensure the smooth operation of computer systems, provide technical support, and maintain data security across the organization.Key Roles &amp; Responsibilities:<ul><li>Install, configure, and maintain computer systems, networks, and software</li><li>Provide technical support and troubleshooting for hardware, software, and network issues</li><li>Perform regular troubleshooting, maintenance, and repair of IT equipment and systems</li><li>Monitor system performance and ensure data security and backups</li><li>Ensure compliance with company IT policies and procedures</li><li>Bachelor&rsquo;s degree or diploma in Information Technology, Computer Science, or a related field</li><li>Proven experience as an IT Officer or in a similar role</li><li>Strong knowledge of computer systems, networks, and troubleshooting techniques</li><li>Good problem-solving and analytical skills</li></ul>Job Type: Full-timePay: Rs40,000.00 per monthWork Location: In person

IT Officer

Stitch

Job Title: Cyber Security Officer &ndash; Compliance, Risk &amp; CryptographyLocation: United Arab EmiratesExperience Level: 8+ yearsDepartment: Information Security / Risk &amp; ComplianceReports To: Chief Information Security Officer (CISO) / Head of Security GovernancePosition OverviewWe are seeking a seasoned Cyber Security Officer to lead and maintain our organization&rsquo;s information security, compliance, and cryptographic infrastructure. The ideal candidate will bring deep expertise in PCI DSS, ISO 27001, SOC 1 &amp; 2, and privacy-related standards, combined with a strong understanding of SAMA Cyber Security Framework (CSF), NCA ECC and CCC, and Sarie security controls.This role will drive cybersecurity strategy, governance, and architecture, ensuring the organization&rsquo;s systems, data, and payment infrastructure remain secure, compliant, and resilient to emerging threats.Key ResponsibilitiesInformation Security Governance &amp; Strategy<ul><li>Develop and maintain the organization&rsquo;s cybersecurity strategy, roadmap, and governance framework.</li><li>Define, implement, and maintain security policies, standards, and procedures in alignment with international best practices (ISO, PCI, NIST).</li><li>Lead risk assessments, gap analyses, and develop mitigation strategies across business units.</li><li>Oversee internal and external cybersecurity audits and coordinate responses and remediation.</li><li>Report key risk and compliance metrics to executive management and regulatory stakeholders.</li></ul>Compliance &amp; Certifications<ul><li>Maintain and ensure ongoing compliance with:</li><li>PCI DSS (including PCI PIN and P2PE)</li><li>ISO 27001, SOC 1 &amp; SOC 2, ISO 27701 (Privacy Information Management)</li><li>SAMA Cyber Security Framework (CSF) and NCA ECC/CCC</li><li>Sarie and UAE Central Bank regulatory requirements</li><li>Oversee audit readiness, manage evidence collection, and coordinate with QSA and internal audit teams.</li><li>Drive continuous improvement in security maturity and compliance posture.</li></ul>Cryptography &amp; Key Management<ul><li>Manage HSM operations, cryptographic key generation, rotation, and destruction procedures in compliance with PCI PIN and PCI DSS.</li><li>Maintain Key Management Systems (KMS) and enforce strict segregation of duties and dual control mechanisms.</li><li>Develop and review Key Management Policies (KMP) and ensure secure storage, handling, and lifecycle documentation.</li><li>Support encryption architecture, ensuring data confidentiality and integrity across systems and payment channels.</li></ul>Cybersecurity Architecture &amp; Operations<ul><li>Define and maintain cybersecurity architecture and ensure integration of secure design principles across IT and fintech platforms.</li><li>Collaborate with infrastructure, DevOps, and product teams to embed security by design in new systems and applications.</li><li>Evaluate and implement security tools such as SIEM, DLP, IAM, EDR, and vulnerability management solutions.</li><li>Lead incident response and root cause analysis (RCA) for major security events and ensure lessons learned are institutionalized.</li></ul>Internal Audit &amp; Risk Management<ul><li>Conduct periodic internal audits of critical systems, data flows, and control environments.</li><li>Identify control gaps and lead remediation plans in coordination with technology and compliance teams.</li><li>Support third-party risk assessments, ensuring vendors adhere to corporate and regulatory security standards.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in information security, Computer Science, or related field</li><li>8+ years of experience in cybersecurity, compliance, and information security governance, preferably in fintech, banking, or payment processing.</li><li>Proven expertise in maintaining compliance with PCI DSS, PCI PIN, ISO 27001, SOC 1 &amp; 2, ISO 27701, and related privacy standards.</li><li>Strong working knowledge of SAMA CSF, NCA ECC/CCC, and Sarie frameworks in the GCC context.</li><li>Hands-on experience with HSMs (Thales, Utimaco, SafeNet, etc.), cryptographic key management, and secure key ceremonies.</li><li>Familiarity with cybersecurity architecture, risk management, and threat mitigation frameworks (NIST CSF, CIS, ISO 27005).</li><li>Strong understanding of network security, encryption standards, incident response, and vulnerability management.</li><li>Excellent communication, leadership, and stakeholder management skills.</li></ul>Preferred Qualifications<ul><li>Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer / Auditor, PCI ISA / QSA.</li><li>Experience working with financial regulators in the GCC and managing multi-audit environments.</li><li>Exposure to Cloud Security (ISO 27017/27018, CSA CCM) and privacy regulations (GDPR, DIFC, ADGM DP Law).</li><li>Strong presentation and executive reporting capabilities.</li></ul>Key Performance Indicators (KPIs)<ul><li>Audit and certification renewal success rate (PCI DSS, ISO, SOC, etc.)</li><li>Security incident rate reduction and MTTR (Mean Time to Resolve)</li><li>Compliance gap closure and risk mitigation timelines</li><li>Security architecture and roadmap maturity level improvements</li><li>Stakeholder satisfaction and regulatory compliance audit outcomes</li></ul>Job Type: Full-time

cyber security officer

The HEINEKEN Company

<div>At ABC, we brew the joy of true togetherness to inspire a better world. A big part of that means brewing better people with the heart of our company in our four values:
<ul>
<li>Passion for consumers and customers</li>
<li>Care for people and planet</li>
<li>Enjoyment of life</li>
<li>Courage to dream and pioneer</li>
</ul>
Job purpose:
 
Cyber Security Officer (CSO) is responsible for the management and implementation of the global Cyber Security Strategy based on the NIST Cyber Security Framework, to reduce the risk of a Cybersecurity incident according to the risk appetite of HEINEKEN and the Global Function, as well as to raise wider Global Function Cybersecurity awareness.
Key responsibilities:
Security Operations
<ul><li>Implement global security strategies to maintain the continuity of systems and update these based on local threats.
</li><li>Responsible to manage updates related to Global Function Security Standards that are required due to local legislative requirements, in consultation with the Global Information Security Specialist in line with HEINEKEN Security Strategy and supporting the HEINEKEN Business Strategy.
</li><li>Responsible for Global Function security approvals regarding global services (e.g. HeiNet), in order to maintain the highest level of security for the information and IT assets of the company.
</li><li>Assist the Global Information Security department in the design of controls/ standards and procedures that have broad implications, requiring systems integration of one or more technical platforms.
</li><li>Perform Risk reviews using the risk management procedure for all new Global Function programs/services to be deployed in the Global Function operational environment and veto programs which do not comply with HEINEKEN&rsquo;s security standards.
</li><li>Monitor internal and external information security and cyber security policy compliance, review and assess information security audits.
</li><li>Performs, as per the prescribed frequency the Information Security Maturity Assessment (ISMA), and ensures that all related evidence is available in support of the assessment.
</li><li>Monitor and ensure the timely closure of tasks related to audit and internal control issues raised by e.g. Global Audit, External Audit, etc.
</li><li>Develops and manages the Information Security action plan to address identified risks and non-compliances.
</li><li>Gains approval from the relevant management team on that action plan and its related budget.
</li><li>Monitors and reports on the execution of that actions plan, reporting to the Global D&amp;T Function management team and centrally to the Global Information Security Team.
</li><li>Analyse and challenge derogation requests regarding the ISP/TSP that Global Functions could have with a new solution or program, and communicate to the Global Information Security Team and Design Authority for approval in order to protect the HEINEKEN security environment.
</li><li>Drive resolution of cyber security incident responses and address security vulnerabilities.
</li><li>Perform/guide/drive digital investigations upon the request of Global Function/HR or Legal teams in case of breaches of HEINEKEN&rsquo;s Code of Business Conduct.
</li><li>If the Global Function faces any critical IT security incidents or breakout, he/she is responsible as the Global Function security incident lead to resolve in consultation with the Cyber Defense Operations Team (CDO), Global Function D&amp;T Directors and Global Function Line Managers.
</li><li>Identify and perform independent analysis to resolve complex first-time issues including the analysis of technical and economic feasibility of proposed security systems/ solutions. He/she is also responsible to assist the Global Information Security department for any IT technical audit (e.g. Ethical Hack) to any Global Function IT infrastructure or service that a 3rd Party offers to HEINEKEN with a valid and open contract to ensure that security policies are in place.
</li><li>Advises Global Function teams for security requirements (e.g. Patching, Anti-Virus, Vulnerability Management, etc).
</li></ul>Security Awareness
<ul><li>Drive training campaigns on cyber security awareness according to the global security awareness program and based on the Global Function reality.
</li><li>Security Strategy
</li><li>Responsible for identifying potential risks and recommendations on how to prevent and/or avoid that risk within the Global Function.
</li><li>Collaborate with the Global Information Security Specialist to understand and develop further the controls and processes required to improve information security.
</li></ul>Innovation
<ul><li>Accelerates and Drives implementation of new Security strategies and standards from global D&amp;T towards the HEINEKEN Global Functions
</li><li>Provide security expertise across multiple technical platforms to various Global Function stakeholders in all phases of solutions development (Ideation, Design, build, test and deploy) and Operations.
</li><li>Number of direct reports: None
</li></ul>Education and Qualifications:
<ul><li>Bachelor in business information technology or a related field
</li><li>Possesses relevant certifications, e.g. CISSP / CCSP / CISM / CISA / CRISC</li>
<li>5+ years of working in the cyber security field and previous experience working as a cyber-security officer or manager.
</li><li>Has worked with relevant market standards such as NIST, ISO 27001, COBIT and relevant laws and regulations such as privacy laws.
</li><li>Experience in handling security incidents.
</li><li>Proven ability to dynamically assess risks, threats &amp; threat actors.
</li><li>Able to work in a cross functional environment; preferably a background in the FMCG industry.
</li><li>Sense of Business Urgency and safe-cautious mind to close critical gaps and reduce any security breach.
</li><li>Ability to explain complex technical processes to business stakeholders.
</li><li>Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change.
</li><li>Ability to work and team with a multitude of different people and different cultures (as appropriate).
</li><li>Display professionalism, customer service attitude, attention to detail and quality.
</li><li>Possess strong interpersonal skills, relationship management and negotiation skills, strong verbal, and written communication skills.
</li><li>Develop self and others through continuous learning, sharing best practices, knowledge, and expertise.
</li><li>Good management and leadership skills.</li></ul></div>

Cyber Security Officer - AME

Search 10000+ Information security officer jobs near you this January. New roles added regularly across leading industries. Apply today.