Director of Information Security

Description

• Responsible for ensuring all vendor and customer contracts align with the global information security compliance requirements.
• Manage & conduct internal 27001 and SSAE18 audits
• Process owner and provider of subject matter expertise to the business on Information Security and information security certificaiton
• Own the development and implementation of the Group Information Security (IS) strategy for the copmany in close co-operation with key stakeholders such as Cyber Security, IT compliance, R&D and the information security resources at local entities.
• Support and advise for supplier relationships
• Develop reports (incidents, audits, risks, etc.) to support wider communication of the Info Sec.
• Co-ordinate and harmonize IS processes and the Information security Management System (ISMS) across other sites
• Lead process to ensure business units comply to the ISO27001 standard and contribute to the wider improvement of the Group security framework.
• Accountable for implementation & managing 27001 and SSAE certifications
• Direct and manage the Global Information Security Team
• Satisfy business in Solution customer projects by providing information security expertise
• Devise and implement an ISMS strategy and support towards having a harmonized L+G Global ISMS Framework
• Accountable for all ISO27001, SSAE18, and all other security compliance certification implementation & on-going management of compliance for the company
• Supporting customer project teams in information security topics
• Provide support and co-ordination during external audits and customer tender requests
• Support the Business Management to make informed decisions regarding information security
• Coach, train employees in information security (incl. awareness)
• Satisfy business in Solution customer projects by providing security expertise for our Customer offerings (end to end)
• Accountable for Managing and Leading the Global Information Security Team of 6-8 resources and a Direct report to the Chief Security Officer
• Implementation of standardized IS controls within business processes
• Support and advise on customer requests for information security
• Perform internal information security audits

Requirements

• Successful implementation & on-going compliance of ISO27001, SSAE, and all other security certifications for L+G sites
• Qualified lead auditor and preferably has perused advanced qualifications such as CISA/CISM
• Past experience in a similar international role.
• Past experience in implementing ISO27001 and SSAE18 within an organization
• As this role will be a stand-alone/self-managed function, the position holder must be able to demonstrate influential abilities to gain buy-in and work with key stakeholders such as site management and IT.
• Training in GDPR would be a plus
• Ability to work in a matrix organization, employees of different nationalities and backgrounds
• Past experience managing security or information security teams
• Good understanding and experience in implanting GDPR and DPIA will be a plus
• Good knowledge of other ISO standards (Eg: 9001, 22301)
• Ability to capture stakeholder requirements and be able to priorities the work to fulfill these requirements and maintain compliance
• Ownership and ensurance of compliance with companywide security certifications
• Technical diploma or degree in engineering/ computer science/ IT
• Experience in managing projects and virtual teams

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance