Apply to Senior Information Security Management Specialist - Remote at Near Shore Cyber

The Senior Information Security Management Specialist is a subject matter expert responsible for overseeing the organization’s Information Security Management System (ISMS) and ensuring compliance with global cybersecurity standards. This role focuses on policy management, risk assessments, governance, and driving a culture of security awareness across the company.

You will help maintain ISO 27001:2022 certification, collaborate with cross-functional teams on compliance and audits, and continuously improve our global information security program.

Key Responsibilities

Maintain compliance with ISO 27001:2022 and all relevant legal, regulatory, and client information security requirements.
Lead risk assessments, gap analyses, and recommend risk mitigation strategies.
Develop and maintain information security policies, standards, and procedures.
Collaborate with Legal, Compliance, and IT teams to ensure adherence to regulations.
Support internal and external ISMS audits and manage certification activities.
Guide and mentor junior team members.
Deliver security awareness and training programs across the organization.
Participate in incident response activities as needed.
Manage and track vulnerability management and reporting processes.
Prepare and present management dashboards and reports on information security performance.
Contribute to the continuous improvement of the information security management system.

Knowledge & Attributes

Strong understanding of information security frameworks such as ISO 27001, SSAE 18/ISAE 3402, DORA, PCI DSS, NIS2, NIST CSF, CIS, GDPR, and PDPA.
Proven ability to conduct risk assessments and manage policies effectively.