Review and interpret security-related contractual obligations to ensure alignment with the ISMS;
Ensure the ISMS is implemented in accordance with the country's legal and regulatory requirements;
Coordinate directly with Asset Owners and internal teams to define and implement security controls, processes, and tools;
Support the SOC in investigations and remediation activities for incidents or policy violations;
Collaborate with Data Protection Officers on privacy impact assessments and ensure compliance with local data protection laws;
Report to the Regional ISO and the CISO on the effectiveness of security controls and compliance levels;
Support Asset Owners in client compliance programs;
Coordinate activities to ensure operational continuity within the defined scope (client, country, program, or department);
Assist in planning and executing response and recovery actions in the event of disruptions;
Ensure proper documentation of incidents and collaborate with teams involved in crisis situations;
Maintain alignment with clients' contractual requirements and obligations;
Facilitate communication with internal and external stakeholders as needed;
Contribute to the continuous improvement of continuity and recovery plans;

Advanced or fluent English.
Experience with ISMS and Information Security governance;
Knowledge of legal and regulatory requirements applicable to information security;
Experience in incident response and working with a SOC;
Experience conducting impact assessments and ensuring compliance with data protection laws;
Knowledge of client compliance programs;
Previous experience with business continuity processes;

Information Security Officer

Key skills