About this role
The Executive – Information Security & Data Privacy is responsible for supporting the implementation and day-to-day operation of the firm's Information Security and Data Privacy program. The role involves monitoring compliance with security policies, conducting security reviews, coordinating audits, supporting incident management, performing risk assessments, and assisting in the implementation of security and privacy controls to protect organizational information assets.
Information Security Support the implementation and monitoring of Information Security policies, standards, and procedures. Conduct periodic security reviews and compliance assessments across business functions. Monitor adherence to information security controls and report deviations. Review user access requests and ensure compliance with access management policies. Assist in evaluating security requirements for new applications, projects, and business initiatives. Data Privacy Assist in implementing data privacy controls in accordance with organizational policies and regulatory requirements. Support data classification, retention, secure disposal, and data handling initiatives. Participate in Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs). Risk Management Perform information security risk assessments for applications, systems, and third-party vendors. Incident Management Coordinate with IT and business teams for timely incident resolution. Support internal, external, and client security audits.
Bachelor's degree in Computer Science, Information Technology, Cyber Security, Information Security, or a related discipline. 1–3 years of experience in Information Security, Cyber Security, IT Risk, or Data Privacy. Preferred Certifications ISO/IEC 27001 Foundation Microsoft Security Fundamentals (SC-900) CompTIA Security+ Certified in Cybersecurity (ISC² CC) Information Security fundamentals Data Privacy principles MS Excel, PowerPoint, and Word Soft Skills Strong analytical and problem-solving abilities Excellent written and verbal communication skills Timely completion of security assessments and reviews. Closure of audit observations within agreed timelines. Accuracy and quality of security documentation. Effective support for security incidents and risk remediation. Timely completion of compliance activities and reporting.