Information Security Officer – Intermediate/Advanced English

Description

Job Summary: We are seeking a professional passionate about strengthening security and contributing to the protection of the organization's information. Key Highlights: 1. Key role in protecting the organization's information 2. Focus on information security and risk management 3. Opportunity to lead audits and ISMS We have a new opportunity for you! **Position:** Information Security Officer – Intermediate/Advanced English At Conexión Todo Ágil 360 CTA, we are looking for a professional with experience in Information Security, risk management, and ISMS, who is passionate about strengthening security and contributing to the protection of our organization's information. **What We Are Looking for in You** · **Education:** Bachelor’s degree in Systems Engineering, Electronics, Telecommunications, or related fields. Specialization, master’s degree, or diploma in Information Security, IT Governance (COBIT, ITIL), or Risk Management (ISO 31000\). · **Certifications:** ISO/IEC 27001:2022 Lead Implementer and ISO/IEC 27001:2022 Lead Auditor. · **English:** B2 level or higher – mandatory. · **Experience:** Minimum 2 years of experience in roles such as: IT Compliance and Security Officer, Internal or External ISO 27001 Auditor, ISMS Coordinator (ISO 27001\), Information Security Officer. **Your experience must include:** · Implementation, maintenance, and continuous improvement of an ISMS under ISO 27001:2022\. · Full-cycle security risk management (identification, analysis, treatment, monitoring). · Leadership of internal and external audits (certification and surveillance). · Development of policies, procedures, work instructions, and control matrix (updated Annex A). · Security incident management. · Reporting and security committees. **Key Knowledge Areas:** · ISO 27001:2022: Comprehensive understanding of the standard, its clauses (4 to 10\), and Annex A with its 93 controls grouped into 4 categories (Organizational, People, Physical, and Technological). · Risk Management: Methodologies such as ISO 31000, MAGERIT, OCTAVE, or similar. · ISMS Documentation Development: Information Security Policy, Risk Treatment Plan, Operational and Control Procedures, Audit Records and Evidence, Indicator Management (KPIs/KRIs) to measure ISMS effectiveness. **Conditions:** * **Work Modality:** 100% On-site * **Schedule:** Monday to Friday * **Compensation:** Between $6\.000\.000 and $7\.000\.000, depending on experience Do you meet the profile? Apply now! Workplace: On-site employment