Consultant Information Security and Data Privacy

We are seeking a skilled and experienced Consultant in Information Security and Data Privacy to join our team. The ideal candidate will have expertise in managing and implementing industry standards such as ISO 27001, ISO 27701, and SOC 2, as well as a deep understanding of data privacy regulations and frameworks.

Key Responsibilities

• Information Security Management:
• Implement and maintain information security management systems (ISMS) in alignment with ISO 27001 standards.
• Develop policies, procedures, and controls to manage and mitigate information security risks.
• Data Privacy Compliance:
• Guide organizations in implementing ISO 27701 for privacy information management.
• Ensure compliance with global data privacy laws, including GDPR, CCPA, and other relevant regulations.
• SOC 2 Readiness:
• Conduct readiness assessments and guide organizations in achieving SOC 2 certification.
• Develop control frameworks tailored to an organizations specific needs.
• Audit & Assessment:
• Perform gap analyses, risk assessments, and internal audits for information security and privacy compliance.
• Assist clients during external audits and ensure successful certification.
  

Key Skills & Qualifications

Education: Bachelors degree in Information Technology, Cybersecurity, or a related field.

Advanced certifications are a plus.

Certifications:

• ISO 27001 Lead Implementer/Lead Auditor
• ISO 27701 Lead Implementer/Lead Auditor
• Certified Information Privacy Professional (CIPP), Certified Information Security Manager (CISM), or similar.
  

Technical Skills:

• Proficiency in implementing and auditing ISO 27001, ISO 27701, and SOC 2 frameworks.
• Strong understanding of risk management and data protection methodologies.
• Familiarity with privacy regulations such as GDPR, CCPA, HIPAA, etc.
  

Experience

• Minimum 3-5 years of experience in information security and data privacy roles.
• Proven track record of implementing and maintaining compliance with ISO standards and SOC 2 frameworks.
• Experience conducting audits and working with external auditors.