Information Security Officer at Smollan

Smollan is looking for an Information Security Officer for the implementation, management and compliance of a comprehensive Information Technology security program with the Information Technology lines of business to protect their applications and supporting infrastructure from both internal and external threats toward zero downtime and zero audit findings. Management of IT risk and compliance in alignment with IT strategy.

Smollan is a top employer of choice.

Qualifications and Skills Needed

• IT related Bachelor Degree or Degree in Computer Science Security related certification (CISSP, CISM, CRISC, CISA) Information Security Forums; ISACA; ISC2 will be advantageous

Minimum Experience

• Strong Risk Management, Audit and IT Security or risk Management background
• Minimum 4-5 years professional experience At least 4 years’ experience in directly assessing and communicating Risk Exposures and developing risk mitigation plans 
• At least 3 years’ experience in coaching and managing people At least 3 years’ experience in coordinating large projects or initiatives across multiple areas
• Must have worked on GPBR processes 

Knowledge, Skills & Abilities

• A detailed understanding of information security concepts 
• Desirable: Knowledge of internal controls, hardware, database, application and technology related security. Mobile device security 
• Excellent knowledge and experience in information security concepts, trends and practices Strong knowledge in the domains of IT Operations, IT Service Management, IT
• Disaster Recovery and Security architecture (application & infrastructure) 
• Strong Project Management skills Good understanding of IT Compliance and Audit frameworks and best practices 
• Written and oral English language proficiency 

Key Responsibilities and Deliverables:

• Provide IT Security strategy, consulting proactively and on a project risk
• Identify, Assess and remediate Technology and IT Security Risks
• Drive audit framework
• Create awareness of IT Security good practices to the IT community
• Assist with implementation of IT Security Policies, Standards and Guidelines