Information Security Associate

Job Description

Hands on working experience & knowledge of ISO 27001:2022. Develop and implement enterprise risk management practices including operational risk framework, policies and procedures, risk appetites, incidents and issues management process. Experiences of preparing documentation based on ISO 27001:2022 regulatory compliance. Internal Audits based on ISO 27001:2022 standard. External Audits based on regulatory compliances. Maintain up-to-date evidences to sustain ISO 27001:2022 Certification and other external audits. Plan and co-ordinate BCP and DR tests/ Vulnerability Assessments/Penetration Testing. Review user access rights review across various platforms. Lead Information Security Trainings for organization Conduct periodic information security review meetings. Evaluate and recommend new and emerging security products and technologies