Information Security Officer

Responsibilities:

Digital Forensic Readiness Assessment (DFRA) - Designed and implemented DFRA frameworks for clients, enabling organizations to proactively prepare for forensic investigations and incident handling.

• Conduct readiness assessments to identify gaps in evidence preservation, log management, and chain-of-custody protocols, ensuring legal and procedural compliance.
• Developed incident response plans and forensic policies aligned with regulatory standards like ISO 27001 and GDPR, improving investigation efficiency and audit readiness.
• Vulnerability Assessment and Penetration Testing (VAPT) - Led comprehensive VAPT engagements for web applications, networks, and endpoints, identifying vulnerabilities and providing prioritized remediation strategies.
• Utilized industry-standard tools such as Nessus, Burp Suite, and Acunetix to uncover critical security weaknesses, reducing risk exposure by over 70%. o Collaborated with client IT teams to implement security patches and enhance system configurations, mitigating future vulnerabilities.

Technical documentation about the security breaches and the processes.

• Configuration reviews for implemented solutions like firewalls, WAF, PAM/PIM, DLP, SIEM Etc…
• Data encryption programs to safeguard organization’s vital data.
• Red teaming, VA-PT, source code reviews, Mobile app reviews
• Work directly with the ISG team and coordination with stakeholders
• Risk assessment and risk management processes
• Understand the processes and interact with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services
• Review and Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Coordinate, measure and report on the technical aspects of security posture.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.
• Manage and coordinate operational components of incident management, including detection, response, documentation and reporting.
• Maintain a knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
• Mitigate the compliance requirements as per regulatory guidelines
• Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and follow policies and audit requirements.
• Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks.

Certification:

ISO/IEC 27001: 2019

Skills:

ISO 27001,

• Risk Management
• Security Awareness Training
• Critical Thinking
• Project Management
• Vulnerability Assessment and Penetration Testing

Requirements:

• Diploma/Degree in a technology-related field
• 5–7 years of hands-on experience in IS/IT Governance, VA-PT, configuration reviews, and data • protection
• Strong knowledge of security frameworks like ISO/IEC 27001 and NIST
• Excellent written and verbal communication skills with a high level of integrity
• Experience with Cloud computing/Elastic computing in virtualized environments