Senior Information Security Officer

• Address security issues identified in the various information security programs
• Review and address issues identified within various Information Security (IS) programs
• Ensure all IS issues related to Internal Audit and External Auditors are closed by their original target date
• Improve the efficacy of governance processes by identifying risks, monitoring controls, and remediating issues
• Establish cross-sector working relationships and complete weekly awareness discussions with local team
• Ensure risk exceptions are raised, registered and closed on a timely basis
• Complete Risk Assessment process including inventory reporting, data classification, threat analysis, and action plans
• Test and validate that the business complies with applicable IS requirements
• Develop and implement IS policies and procedures
• Determine and validate appropriate level of controls are being implemented to safeguard sensitive data
• Develop Corrective Action Plans for all Information Security-related gaps
• Assume informal/formal mentorship role within teams and assist with coaching and training of new team members

• 5-8 years of relevant experience
• Strong knowledge of local regulations (BRSA) and cybersecurity principles
• Proficient in interpreting and applying policies, standards and procedures
• Consistently demonstrates clear and concise written and verbal communication
• Proven influencing and relationship management skills
• Proven analytical skills
• Preferably holding IT/security certifications such as CISA, CISM, CISSP, CRISC, CEH or similar
• Follows cybersecurity trends
• Bachelor's degree/University degree or equivalent experience

IT/security certifications such as CISA, CISM, CISSP, CRISC, CEH or similar