Job Description
We are looking for an ISMS expert to implement and maintain Information Security Management System (ISMS) based on ISO 27001.
Main Responsibilities are as follow:
- Gap analysis.
- Identification, documentation, maintenance and valuation of IT Services and Assets.
- Continuous Information Security Risk Assessment (Identification, Analysis, evaluation), measure and monitor
Information Security Risks and Risk Treatment Plan.
- Design and maintain ISMS policies, procedures and instruction based on international standards, the legal and
- Regulatory requirements and contractual obligations.
- Auditing of ISMS and other requirement (Develop and maintain audit checklist and documents)
- Prepare Security Risk management reports and other Reports.
- Review and Analyze result of the information security Incident Management.
- Determine, Monitor and Review key Performance Indicators (KPIs) and evaluate the effectiveness of the ISMS.
- Define and implement effective information security awareness programs, preparing and revising information
- Security training programs.
