Information Security Senior Officer / Supervisor at Umniah | Torre

Information Security Senior Officer / Supervisor

Emma highlights
This highlight was written by Emma’s AI. Ask Emma to edit it.
Full-time

USD75.4K - 100K/year

~COP150M - 200M/year

+ Equity

+ Bonuses

location_on
Remote (anywhere)
Posted about 3 years ago

Responsibilities


Uwalet is a company that values the security and continuity of its business. They have a standardized company-wide Business Continuity and Information Security to prevent and detect impacts of crises or disasters when they occur and minimize their effects. The job involves providing development, implementation, testing, education, and maintenance of a standardized company-wide Business Continuity and Information Security. The role includes managing UWallet's information security practice, establishing a cyber security & business continuity program and policy, performing penetration testing, managing the cyber security & business continuity program and policy, identifying and assessing cyber risks, preparing regular and ad-hoc reports, developing and implementing a cyber attack response plan, identifying any missing security solutions, reviewing and validating newly developed policies and procedures, and reviewing the network and systems regularly to ensure secure configuration. Responsibilities: - Manage UWallet information security practice and represent UWallet in meetings with the CBJ or other similar organizations. - Establish a cyber security & business continuity program and policy and ensure the execution of the program with regular review and updates. - Perform penetration testing for the UWallet environment (mobile & web applications and internal infrastructure). - Manage the cyber security & business continuity program and policy, assess the efficiency and completeness of the cyber security program, and ensure regular review and update of the security controls. - Identify and assess cyber risks. - Prepare regular and ad-hoc reports (such as deviations associated with the implementation of the cyber security policies and procedures, cyber security risks assessment results, and cyber security program assessment in terms of completeness and efficiency) and come up with recommendations/ actions to be implemented, identify new requirements, identify threats and breaches related to the company. - Develop and implement a cyber attack response plan for instant response and recovery from any cyber attack and continuously test and update it based on previous experiences and lessons learned from external parties. - Identify any missing security solutions that might be needed and help with sizing and evaluating proposals. - Review and validate newly developed policies and procedures. - Review the network and systems regularly to ensure secure configuration.