Your role The Information Security Officer provide expertise, support and guidance to all teams at SNV on implementing, maintaining and reporting on information security posture around confidentiality, integrity and availability. The ISO will function within the context of SNV's comprehensive Information Security Governance Framework, which includes maintaining a robust Information Security Management System (ISMS) based on industry standards such as ISO/IEC 27001.This is a new position within a newly established information security organization at SNV, reflecting the organisation's commitment to enhancing its security posture. The ISO will support the Global Information Security Officer (GISO) in executing the information security strategy and will deeply collaborate with the country teams and the various global teams to conduct risk assessments, propose and implement measures in line with the Information Security policy and support in manage information security incidents. This role is pivotal in fostering a culture of information security awareness and ensuring that SNV's information security measures are aligned with its strategic goals and regulatory requirements.The Information Security Officer reports to the Global Head of ICT and has a functional reporting line to the Global Information Security officer (GISO). It is the intend that over time the ISO will grow into the GISO role. The GISO role is currently fulfilled on a part-time basis by an expert consultant.Context of the role SNV has set out a strategy to further mature its information security function. With increasingly digitalized management across all SNV’s operations, it becomes crucial to ensure there is full control over all our digital assets and information. This is especially relevant as SNV works and collaborates with many partner and donor organizations across all its projects which creates additional complexities in the landscape of information governance. Furthermore, SNV will likely establish a multi-year Digital Transformation roadmap focusing on increased impact and operational excellence. This will require more robust and fully embedded information security practices in the organisation.Key job responsibilities The main responsibilities of the ISO are the following:<ul><li>Support in developing, maintaining and implementing information security measures, processes and procedures</li><li>Support in preparing and conducting Business Impact Assessments and Risk Assessments</li><li>Support GISO in preparing and executing the annual information security plan</li><li>Respond to and manage information security incidents and breaches, including conducting investigations and proposing and implementing corrective actions</li><li>Support the GISO in ensuring compliance with relevant data protection laws and regulations</li><li>Coaching and guiding of Information Security Ambassadors to ensure the ISA’s are enabled to translate the information security policy and procedures into concrete measures that need to be implemented and embedded into the work processes of their respective team as well as support the ISA’s in reporting back on information security posture of their team.</li><li>Developing and maintaining guidance for SNV employee’s on how to put the information security policy into practice in day-to-day work.</li><li>Be champion and go to person for information security related questions from the organization. Leverage the SNV Intranet to share guidance information.</li><li>Expertise: Stay up to date with the latest security systems, standards, authentication protocols, and products. Build and grow expertise through formal training and certifications as well as participating in information security related communities and events.</li><li>Collaboration: Coordinate with technology and business teams to assess risk and stay abreast of cybersecurity threats</li><li>Reporting: Review, analyse, and deliver reports on security incidents to senior management as well as overall state of information security against plan.</li></ul>

SNV is a mission-driven global development partner strengthening capacities and catalysing partnerships&nbsp;that can transform the agri-food, energy, and water systems.

Information Security Officer (ISO)

Your role The Information Security Officer provide expertise, support and guidance to all teams at SNV on implementing, maintaining and reporting on information security posture around confidentiality, integrity and availability. The ISO will function within the context of SNV's comprehensive Information Security Governance Framework, which includes maintaining a robust Information Security Management System (ISMS) based on industry standards such as ISO/IEC 27001.This is a new position within a newly established information security organization at SNV, reflecting the organisation's commitment to enhancing its security posture. The ISO will support the Global Information Security Officer (GISO) in executing the information security strategy and will deeply collaborate with the country teams and the various global teams to conduct risk assessments, propose and implement measures in line with the Information Security policy and support in manage information security incidents. This role is pivotal in fostering a culture of information security awareness and ensuring that SNV's information security measures are aligned with its strategic goals and regulatory requirements.The Information Security Officer reports to the Global Head of ICT and has a functional reporting line to the Global Information Security officer (GISO). It is the intend that over time the ISO will grow into the GISO role. The GISO role is currently fulfilled on a part-time basis by an expert consultant.Context of the role SNV has set out a strategy to further mature its information security function. With increasingly digitalized management across all SNV’s operations, it becomes crucial to ensure there is full control over all our digital assets and information. This is especially relevant as SNV works and collaborates with many partner and donor organizations across all its projects which creates additional complexities in the landscape of information governance. Furthermore, SNV will likely establish a multi-year Digital Transformation roadmap focusing on increased impact and operational excellence. This will require more robust and fully embedded information security practices in the organisation.Key job responsibilities The main responsibilities of the ISO are the following:<ul><li>Support in developing, maintaining and implementing information security measures, processes and procedures</li><li>Support in preparing and conducting Business Impact Assessments and Risk Assessments</li><li>Support GISO in preparing and executing the annual information security plan</li><li>Respond to and manage information security incidents and breaches, including conducting investigations and proposing and implementing corrective actions</li><li>Support the GISO in ensuring compliance with relevant data protection laws and regulations</li><li>Coaching and guiding of Information Security Ambassadors&nbsp;to ensure the ISA’s are enabled to translate the information security policy and procedures into concrete measures that need to be implemented and embedded into the work processes of their respective team as well as support the ISA’s in reporting back on information security posture of their team.</li><li>Developing and maintaining guidance for SNV employee’s on how to put the information security policy into practice in day-to-day work.</li><li>Be champion and go to person for information security related questions from the organization. Leverage the SNV Intranet to share guidance information.</li><li>Expertise: Stay up to date with the latest security systems, standards, authentication protocols, and products. Build and grow expertise through formal training and certifications as well as participating in information security related communities and events.</li><li>Collaboration: Coordinate with technology and business teams to assess risk and stay abreast of cybersecurity threats</li><li>Reporting: Review, analyse, and deliver reports on security incidents to senior management as well as overall state of information security against plan.</li></ul>

Information Security Officer (ISO)

About the Job

About the Company

SNV

Similar Jobs

Senior IT Security Analyst

Senior IT Security Analyst

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Senior IT Security Officer

Product Security Advisory Manager/Lead

Product Security Advisory Manager/Lead

Operational Technology (OT) Security Expert

Operational Technology (OT) Security Expert

SecOps Engineer

SecOps Engineer

Chief Information Security Officer (CISO)

Chief Information Security Officer (CISO)

Staff Program Manager, Information Security

Staff Program Manager, Information Security

Information Security Engineer

Information Security Engineer