ISMS Officer

ISMS (ISO 27001) certification support Job Description

Role Purpose:

Responsible for supporting the design, implementation, operation, and continual improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001:2022, Cyber trust mark and supporting SOC 2 readiness, audits, evidence collection, and compliance activities. The role works closely with SOC Operations, IT, Risk Management, Compliance, QA, and external auditors to achieve and maintain security certifications and assurance reports.

Experience: 6 to 7 years working experience in below roles.

Key Responsibilities:

ISO 27001 ISMS Support

Support ISMS scope definition, context analysis, and stakeholder requirements.

Conduct ISMS gap assessments against ISO/IEC 27001:2022.

Facilitate information security risk assessments and risk treatment planning.

Develop and maintain: 

• o Information Security Policies
• o Procedures
• o Standards
• o Guidelines
• o Statement of Applicability (SoA)

Support internal audits and management reviews.

Track corrective actions and continual improvement initiatives.

Coordinate Stage 1 and Stage 2 certification audits.

Maintain ISMS documentation and records.

Audits and Compliance

Plan, conduct, and coordinate internal audits.

Support external audits, certification audits, and customer audits.

Track audit findings, non-conformities, corrective actions, and closure status.

Ensure compliance with contractual, statutory, and regulatory requirements.

Other Skill

Strong knowledge of ISO 27001 Quality Management Systems. 

Understanding of audit methodologies and compliance requirements. 

Excellent analytical and problem-solving skills. 

Strong communication and stakeholder management abilities. 

Experience in root cause analysis and continuous improvement techniques. 

Proficiency in Microsoft Office tools and reporting dashboards.

Good presentation skill

Connecting with other region affiliates from different countries