Information Security Management System Executive

The candidate is to directly responsible to the Section Manager – QA.
Requirements: Bachelor Degree in Information Technology, Cybersecurity or a related fieldMinimum 3 years of working experience in similar capacity, Information Technology and CybersecurityWorking experience in aviation maintenance industry is an added advantageRelevant certifications e.g.ISO 27001 Lead Implementer, CISSP, CISM or its equivalentExperience in implementing ISMS and security frameworksAble to work in a fast-paced and dynamic environment Responsibilities: Design and implement an ISMS framework in accordance with recognized standards, e.g. ISO 27001Establish security policies, procedures and guidelines, ensuring integration with aviation safety requirements, such as EASA Part-ISConduct risk assessments to identify vulnerabilities and implement control measuresMaintain ISMS documentation to ensure compliance with regulatory standardsDevelop and deliver security awareness training programs for employeesEnsure compliance with relevant laws, regulations, and standards, and prepare for internal and external auditsManage incident response plans, investigate security incidents, and recommend improvementsMonitor the effectiveness of security controls and report on ISMS performance using metrics and KPIsCollaborate with IT and other departments to integrate ISMS practices and promote security initiativesContinuously enhance the ISMS by staying updated on industry trends and best practicesEnsure third-party vendors comply with ISMS requirements and manage vendor relationshipsDevelop, test, and maintain business continuity and disaster recovery plansEvaluate and implement security technologies, ensuring secure system configurations