business Information Security officerAdmerex Solutions Inc.

Description
Temporary Work From Home but may Work Onsite when needed.
Responsible for providing upward visibility into the security posture of the division and must have a solid plan for measuring improvement and ensuring appropriate goals are established and tracked.
This individual will have a key role in supporting one or more of the following;
IS Audit, Remediation and Compliance
Ensure that internal audit is regularly conducted based on schedule.
Review Gap Assessment Report and provide recommendations.
Review remediation and corrective actions done and make sure that these are implemented and executed.
Review audit workpapers, tests and findings.
Review gathered information, records and documents and result of interviews with individuals.
Ensure that all IT process and methodologies are followed and complied consistently like Incident Management, Risk Management, Patch Management, Hardening Procedures, SDLC and others.
Ensure that all required data, network security and restrictions are properly configured and executed like in the firewall, antivirus, VPN connectivity, and VLAN.
Ensure that there are no exploits and vulnerabilities existing on the organizations network and infra.
Ensure that compliance to PCI DSS is consistently practice.
Ensure that periodic VAPT and Segmentation tests have been conducted.
Project Management
Ensure that all ASANA users are fully utilizing the tools.
Ensure that all ASANA users consistently follow the rules and procedures in using the tool. Conduct periodic audits.
Ensure that ASANA license count is within the budgeted level.
Maintain the ASANA users and remove those who are no longer part of the organization.
Conduct basic and advance orientation on the use of ASANA.
Regularly update the ASANA Policy and procedure Manual.
Ensure all projects involved are delivered and completed on the set due date.
Manages and mitigate risks and dependencies.
Encourages the facilitation of project review to analyze what went wrong and formulate corrective actions and permanent measures.
Process Transformation
Spearhead and recommends process innovations and transformations.
Assess inefficient processes and recommends improvement.
Implement and sustain best practices.
Analyze, review, and assess the impact of the new process in terms of productivity, efficiency, and cost.
Document Management and Control
Ensure that all departmental documents are up to date.
Ensure documents are version controlled.
Ensure documents repository and folders are properly structured.
Modify and update policies, manual, audit checklist, templates, and others.
Create document templates.
Ensures that all manuals and documents are reviewed and approved.
Certification and Accreditation
Get involved and work with different departments in certification and accreditation process like PCI DSS audit and compliance.
Coordinates with external assessor or auditor on gap assessment and ensure the remediation on gaps and findings are fixed.
Ensure the company will be certified.
Job Requirements:
CISA/CISM certification is preferred but not required.
Candidate must possess a Bachelor's degree in Information Technology or a related field.
Knowledge of security across various platforms, problem-solving skills and technical aptitude.
Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (ISO & PCI).
Familiarity with legal terminology and aspects of security governance.
Can easily transition to a fast-paced environment, must be able to learn new concepts quickly that affect the security posture of the company
Meticulous, attentive to quality and details
Requirements
Minimum education level: Bachelor ́s Degree
Years of experience: 3
Language(s): English
Availability for travel: Yes
Availability for change of residence: Yes
People with disabilities: Yes

Mandaluyong, National Capital Region ·  2 days ago