Information Security Officer

On behalf of a client, a well-established firm operating in the professional services field, we are looking to recruit an Information Security Officer to join their team in Nicosia.

Objective
The Information Security Officer (ISO) will be responsible for developing, implementing, and managing a comprehensive information security program. This role involves designing security policies, procedures, and technical solutions to mitigate risk, ensuring compliance with regulatory requirements, and responding to security incidents.

Position’s Duties and Responsibilities

Establish and continuously improve the organization’s information security management framework.
Lead the design, review, and enhancement of security policies, standards, guidelines, and best practices.
Conduct regular risk assessments and security audits to identify potential vulnerabilities, providing actionable recommendations for mitigation.
Develop and implement an incident response plan to swiftly address and mitigate security breaches. Lead post-incident analysis to prevent recurrence.
Create and manage security awareness and training programs to educate employees on security risks and best practices.
Collaborate closely with IT, legal, compliance, and other departments to ensure security measures are integrated into business processes and technologies.
Evaluate the security posture of third-party vendors and partners, ensuring they align with organizational security standards. Manage security aspects of contracts and agreements.
Ensure compliance with data privacy regulations (e.g., GDPR, HIPAA) by implementing appropriate data protection measures.

Position’s Requirements

Bachelor’s degree in information security, Computer Science, Information Technology, or any other related field.
1-3 years experience in information security, cybersecurity, or a related discipline.
Proficiency in common information security management frameworks (e.g., ISO/IEC 27001, NIST, COBIT).
Strong understanding of network security, access control, encryption, and data protection technologies.
Experience with security tools such as Security Information and Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), and vulnerability scanning solutions.
Experience in developing and implementing information security policies and procedures.
Industry-Specific Experience: Previous experience in a similar security role.
Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or equivalent.
Knowledge of cloud security best practices and experience with cloud platforms such as AWS, Microsoft Azure.
Up-to-date knowledge of emerging security threats and trends, and a proactive approach to cybersecurity.
Excellent knowledge of Greek and English.
Excellent written and verbal communication skills, with the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
Strong analytical, problem-solving, and critical thinking abilities.

Employer’s Details
Benefits:

13th salary
Overtime / Bonus scheme
Medical insurance
Provident fund
Hybrid working model
Four-day long weekends in August (all Fridays free)

Information Security Officer, Nicosia - ISO/12/24