Information Security & Compliance Specialist, Enterprise Technology Group

About the role

ROLE PURPOSE Lead and continuously improve SPNI's information security program across governance, risk, compliance, architecture, cloud, identity, vulnerability management and incident response.

What you'll do

• Governance, ISMS, Compliance & Assurance
• Own and continually improve the ISO/IEC 27001:2022-aligned ISMS; maintain scope, risk methodology, Statement of Applicability, treatment plans and evidence
• Define executive KPIs/KRAs and dashboards covering material risks, control gaps, compliance status, remediation priorities, critical exposure, aging, recurrence
• Enterprise & Third-Party Risk Management
• Lead periodic and change-triggered risk assessments across business processes, technology, projects and suppliers; maintain a consolidated register with owners, ratings

What you need

• 10–18 yrs of experience
• Compliance
• Vulnerability assessment
• Incident response
• SIEM
• Linux
• IAM
• B.Sc or B.Tech or B.E. or BCA

Good to have

• Firewalls
• DLP
• OWASP
• CISA
• CISM
• CISSP