مخطط استراتيجي أمن المعلومات / INFORMATION SECURITY STRATEGIST

• Routine line management and leadership of staff within the Information Security Management function.

• Leadership and strategic direction for the function, ranging from planning and budgeting to motivational and promotional activities expounding the value of information security.

• Liaison with and offers strategic direction to related governance functions (such as Physical Security/Facilities, Risk Management, IT, HR, Legal and Compliance) plus senior and middle managers throughout the organization as necessary, on information security matters such as routine security activities plus emerging security risks and control technologies.

• Leads the design, implementation, operation and maintenance of the Information Security Management System based on the ISO/IEC 27000 series standards, including certification against ISO/IEC 27001 where applicable.

• Forms a “centre of excellence” for information security management, for example offering internal management consultancy advice and practical assistance on information security risk and control matters throughout the organization and promoting the advantages of managing information security risks more efficiently and effectively.

• Leads or commissions the preparation and authorizes the implementation of necessary information security policies, standards, procedures and guidelines, in conjunction with the information security

• Leads the design and operation of related compliance monitoring and improvement activities to ensure compliance both with internal security policies etc. and applicable laws and regulations.

• Leads or commissions suitable information security awareness, training and educational activities.

• Leads or commissions information security risk assessments and controls selection activities.

• Leads or commissions activities relating to contingency planning, business continuity management and IT disaster recovery in conjunction with relevant functions and third parties.

Information security management qualifications such as CISSP or CISM

Computer Science / Computer Information System or Management Information Systems