Job Description
We are seeking a
proactive and detail-oriented professional to lead the organization's ISO 27001
certification journey while supporting various technical and security
initiatives. This role is responsible for managing certification-related
projects, preparing and maintaining documentation, and contributing technical
expertise to both local and regional initiatives.
The successful
candidate will also take on a leadership role in establishing and managing a
Security Operations Center (SOC) team, ensuring effective coordination with
internal stakeholders and driving overall information security objectives.
Key Responsibilities
- Lead and manage the
end-to-end ISO 27001 certification project
- Prepare, review, and maintain
all required documentation for ISO 27001 and other relevant certifications
- Support technical and
security-related projects at both local and regional levels
- Provide technical input and
recommendations for ongoing initiatives and system improvements
- Act as team lead for the
local Security Operations Center (SOC) once established
- Coordinate closely with
internal stakeholders to ensure alignment on security initiatives
- Monitor progress, risks, and
deliverables related to certification and security projects
- Perform other related duties
as assigned by senior leadership
Qualifications
- Bachelor's degree in
Information Technology, Computer Engineering, Electronics &
Communications Engineering, Accountancy, or any related field
- Minimum of 8–10 years
of experience in
IT, information security, IT audit, or security governance
- Strong understanding of networking
concepts, server management, and TCP/IP
- Experience in ISO 27001
certification processes is highly preferred
- Proven background in information
security practices or cybersecurity operations
- Demonstrated continuous
learning or professional development in relevant fields
- Proficiency in Microsoft
Office tools
(especially Excel and PowerPoint)
Technical Skills & Competencies
- Intermediate to advanced
knowledge of:
- Server and network device
management/setup
- Information security
frameworks and best practices
- Technical terminology and
security concepts
- Ability to analyze issues and
provide practical solutions or workarounds
- Strong project management and
documentation skills
- Leadership capability with
experience handling teams or cross-functional coordination
Nice to Have
- Experience in setting up or
managing a Security Operations Center (SOC)
- Relevant certifications
(e.g., ISO 27001 Lead Implementer/Auditor, CISSP, CISM, etc.)