security policies and procedures:
- assist in the development and implementation of information security policies, standards, and procedures.
- educate employees on information security best practices and enforce compliance with policies.
security awareness and training:
- collaborate in developing and delivering security awareness programs and training sessions.
- educate customers on security best practices, policies, and procedures to foster a security-conscious culture.
security governance and compliance:
- support clients in establishing effective security governance frameworks, including roles, responsibilities, and accountability.
- assist in implementing and managing compliance programs, ensuring adherence to relevant regulations, standards, and frameworks (e.g., pci dss, iso 27001).
- help clients prepare for and respond to external audits and compliance assessments.
information security audits:
- conduct information security assessments for clients, including risk assessments and cybersecurity maturity assessments, compliance audits, third-party audits, etc.
- identify security gaps, vulnerabilities, and risks in client's it infrastructure and processes.
- write good quality reports of security audits / assessments.
- understanding of technical concepts relevant to the position.