Job Description
**Job Summary:** Information Security Specialist responsible for overseeing security processes, collaborating with stakeholders, and implementing security controls to ensure policy adherence and risk mitigation. Key Responsibilities: * Oversee security processes for corporate clients, including contract negotiations, security questionnaires, and security audits. * Collaborate with stakeholders to handle security-related requests across the organization using the ticketing system. * Lead the implementation and ongoing management of the Information Security Exception process. * Assist in developing the third-party audit framework and facilitating security audits and risk assessments for external partners. * Contribute to the continuous improvement of the information security roadmap and internal processes. * Partner with various departments to document, implement, and maintain security controls. * Support the company's security awareness program and assist in investigations related to phishing incidents and other security breaches. **Requirements:** * Bachelor's degree in Computer Science, Information Security, Business, or a related field. * Minimum of 4 years in information security or auditing roles. * Certifications such as CISSP, CISM, CISA, or ISO 27001 are highly preferred. * Strong understanding of risk management practices and information security controls. * Familiarity with compliance regulations, IT security frameworks, and industry standards. * Proven experience conducting security audits and risk assessments. * Desirable knowledge of data protection regulations and GDPR compliance. * Demonstrated leadership skills with the ability to influence and engage stakeholders. * Excellent verbal and written communication skills. * Proactive, self-motivated individual who excels in team-oriented and independent working environments. **Skills:** * ISO 27001 * NIST * PCI-DSS * COBIT * CISSP * CISM