Infosec Specialist

About InDebted

Role Overview

Duties and Responsibilities:

• 3rd Party Vendor management:
• Assess and evaluate third-party vendors' security practices and compliance with organizational standards.
• Perform risk assessments on vendors and ensure they meet required cybersecurity standards.
• Collaborate with procurement and legal teams to include security requirements in vendor contracts.
• Regularly review and evaluate current vendors
• Maintain a centralized database of all vendor security assessments and risk profiles.
• Audit Assistance:
• Support internal and external audits by gathering and organizing relevant security documentation.
• Ensure compliance with industry standards, regulations, and internal policies during audits (e.g., ISO 27001, NIST, GDPR).
• Identify and address gaps in security controls or processes highlighted during audit findings.
• Engaging with stakeholders for relevant audit information.
• Monitoring Systems:
• Monitor security systems, networks, and applications for potential threats or breaches.
• Coordinate with IT teams to troubleshoot and resolve security-related issues.
• General Information Security Responsibilities:
• Assist in developing and updating security policies, procedures, and guidelines.
• Collaborate with cross-functional teams to ensure alignment with security protocols.
• Provide training and guidance to staff on vendor management, audit preparation, and security best practices.
• Contribute to the continuous improvement of the organization's information security posture.

Must Have:

• Knowledgeable on IT Risk Assessment, Privacy Risk and Data Privacy Compliance to establish controls.
• Minimum 3 to 5 years’ experience in Internal and External Audit
• Excellent communication and presentation skills (speaking, reading writing)
• Must be proficient in MS Office Applications and Google Suite
• Must have the ability to work as a team member and independently
• Can work within the set timelines and strict timeframes.

Nice to Have:

• Knowledgeable on the GDPR and international Privacy Laws
• Data Privacy Certification would be a plus
• Must have 3 to 5 years experience in assessing Information Security Risk and Privacy Risks anchored on the Information Security Management System (ISO 27001), Quality Management System (ISO 9001) and Privacy Information Management System (ISO 27701).
• PCI and SOC 2 experience.

After 12 months in the role, you would have achieved the following:

• Enhanced the organization's overall cybersecurity framework through effective risk management, vendor assessments, and implementation of security controls.
• Supported internal and external audits with minimal findings, ensuring compliance with industry standards and closing any identified security gaps promptly.
• Implemented or optimized monitoring systems that effectively detect and respond to potential security incidents, reducing the frequency and impact of breaches.
• Developed and executed a comprehensive security strategy aligned with organizational goals, driving measurable improvements in data protection and risk reduction.
• Fostered stronger cross-departmental collaboration on security initiatives and increased awareness of cybersecurity best practices across the organization.

Our benefits