Information Security Officer

About the role

As an Information Security Officer you will lead the design, implementation and ongoing management of the organisation’s information security programme across its global operations. You will work closely with IT, business units and external auditors to embed security controls, conduct risk assessments and respond to incidents.

Key responsibilities

• Implement and maintain the information security management system, including user access controls, cryptography and physical security of IT assets.
• Conduct regular security audits, risk assessments and compliance reviews against ISO 27001, PCI DSS and other frameworks.
• Monitor security events, analyse SIEM alerts, manage tickets and investigate incidents on endpoints, servers and networks.
• Develop, update and enforce security policies, procedures and evidence collection for internal and external audits.
• Collaborate with ICT and business teams to integrate security tools and best practices into daily workflows.
• Identify threats and vulnerabilities, run scanning tools such as OpenVAS and drive remediation actions.

Required profile

• Bachelor’s degree in IT, Computer Science or a related field.
• 4‑5 years of experience in information security management or a related cybersecurity role.
• Strong knowledge of ISO 27001; familiarity with PCI DSS, NIST and security certifications is a plus.

Required skills

• ISO 27001 implementation and audit experience.
• Understanding of PCI DSS and NIST frameworks.
• CompTIA Security+ or equivalent certification.
• Proficiency with vulnerability scanners such as OpenVAS.
• Experience with SIEM platforms and security incident response.