Information security officer at Kyla | Torre

Information security officer

Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

Legal agreement: Contractor

Currency exchange and payroll taxes to be paid by:

Candidate

Base compensation
USD30 - 80/hour

+ Bonuses

+ educational courses

Non-negotiable
location_on
Remote (specific timezone)
public
GMT-11:00 to GMT-03:00
Posted about 4 years ago

Responsibilities


- Be available to interact with the US team from 7 am PST till 10am PST; - Create relevant information security policies and procedures; - Develop both high- and low-level action plans for implementation of the information security policies and procedures maintaining the proper balance between business priorities, information security risks, and cost of controls implementation for the organization; - Coach, advise and drive adoption of developed policies and procedures and implementation of the action plans; - Establish and maintain strong relationships with both senior and operating level business leaders to ensure alignment to customer and business needs while prioritizing key initiatives; - Coordinate the maintenance of the Information Security Risk Management process, coordinate risk assessment cycle implementation with respective risk and control owner definition, and development of Risk Treatment plans; - Support audit cycle implementation to be done through preparation of materials for audit conduction, coordination of audits, participation in audits. Organize and manage the communication of results to the Management Team and respective involved parties; - Participate in the customer information security compliance process. Identify and analyze customer requirements related to information security; - Arrange a preparation for the external information security audits. Participate in the audit passing process; - Coordinate the process of the implementation of the corrective actions to address nonconformities found during internal and external information security audits; - Provide supervision and guidance for the engineers; - Promote the compliance mindset: organize the development and delivery of required communication campaigns, awareness programs and training for different focus groups and different internal and external stakeholders; - Provide subject matter expertise in information security for internal and external requests.