Information Security Officer (ISO)

Our client is looking for an Information Security Officer (ISO) to join their team on a 12 month contract with a view to extend if a good fit.Key Responsibilities:To support the ISO team to achieve the following across all entities within the group:Risk Management: Identifying, accepting, developing solutions for, and mitigating risks.Maintain a risk register to track identified risks and their mitigation status. Regularly report on risk status and mitigation progress to senior management.Education: Educating business and functional leaders on policies, standards, and baselines. Develop and conduct regular training sessions for employees on cybersecurity best practices. Launch campaigns to raise awareness about specific security threats, such as ransomware or social engineering.Collaboration: Collaborating on incident management, threat modelling, vulnerability management, and third-party assessments.Incident Response: Develop and maintain incident response plans and collaborate with teams during incidents.Vulnerability Management: Identify and address vulnerabilities in systems and processes.Compliance Monitoring: Ensure adherence to regulatory requirements and internal policies. Conduct regular audits to ensure compliance with relevant regulations and standards (e.g., GDPR, POPIA). Develop dashboards to provide real-time visibility into compliance status.Third-Party Compliance: Ensure that third-party vendors and partners comply with relevant security standards and regulations.Security Integration in Projects: Work with project teams to integrate security measures from the beginning.Education and Required Experience Bachelor’s degree in information security or computer science, or a related fieldISO 27001 Lead Implementer or any relevant certification3-5 years experience with information technology security