Description
Information Security Officer Specialist Governance Framework IT Digital Brussels Belgium
Description
Over the last years, the company Information Security team has implemented many additional controls in order to increase the security posture and its subsidiaries. However, the company reckons that still a lot of work is needed, especially on the governance side of Information Security.
Scope of work
- Review and update the existing Information Security policy and standards (Password Standard, Remote Access Standard ) to ensure these are up-to-date and in line with industry best practices and regulatory requirements
- Perform a gap analysis to identify improvements in the current security governance
- Define and execute initiatives to implement these improvements
- Analyze the impact of new regulatory standards (EIOPA, TIBER-EU, NIS Directive) on the company's Information Security and develop the necessary documentation, policies and procedures to comply with these standards.
- Update the ICT Security roadmap with short-term and long-term initiatives to ensure the ICT Security governance remains up-to-date
- Formalize ICT Security requirements for new projects or initiatives launched
- Define required amount of recurring workload and amount of project-style workload.
- Represent the CISO during meetings with project (implementation) teams and ICT Sourcing partners
Deliverables
- An updated version of the company Information Security policy and supporting standards as well as the creation of new standards and baselines
- Updated documentation, policies and procedures which are required by new regulatory standards
- Implementation of updated ICT Security governance.
- Formalization of information security processes, requirements and guidelines for projects and initiatives
Work hours, travel requirements
- Travels to support the development of the SoW (travel to be arranged and cost carried by the company)
- For administrative simplicity all travel assignments are arranged by the company and also the costs are carried directly by the company too.
Please forward your CV ASAP for a full description and immediate consideration