Job Summary

This role ensures robust information security management by overseeing incident escalation, driving compliance with ISO 27001:2005 and related frameworks, and advancing operational excellence. The individual leverages expert-level knowledge to validate security controls, guide process improvements, and serve as a key liaison for business segments, contributing to customer satisfaction and business enablement.

Key Responsibilities

1. Lead incident and escalation analysis using ISO 27001:2005 and ISMS frameworks, ensuring timely and quality resolution in alignment with SLA and compliance requirements.
2. Apply expert knowledge of NIST and CIS controls to validate and enhance change order implementation plans, ensuring robust human error compliance and information security best practices.
3. Mentor and provide technical guidance to administrators and team members on ISO 27001:2005, ISMS, NIST, and CIS standards, supporting the creation and maintenance of SOPs and comprehensive documentation.
4. Conduct advanced root cause and trend analysis using ISMS tools and methodologies, preparing reports and recommendations for key business stakeholders.
5. Represent the ISMS function in customer meetings, presenting findings, addressing complex security concerns, and facilitating proactive communication to ensure positive customer satisfaction and feedback.
6. Identify and contribute to opportunities for business growth by aligning EN business initiatives with information security improvements and capacity planning.

Skill Requirements

1. Excellent Knowledge Of Nist And Cis Information Security Frameworks.
2. Advanced Skills In Performing Root Cause Analysis, Incident Management, And Trend Analysis Within An Isms Environment.
3. Demonstrated Ability To Mentor Teams And Develop Sops And Security Documentation.
4. Advanced Proficiency In Validating Change Management Processes And Ensuring Quality Compliance.
5. Strong Communication And Presentation Skills For Engaging Business Stakeholders And Customers.

Other Requirements

1. Certified ISO/IEC 27001 Lead Implementer or Lead Auditor (highly recommended).
2. CISSP or CISM certification (optional but valuable)