The Information Security Officer (ISO) provides the vision and strategies necessary to ensure the confidentiality, integrity, and availability of SOLABORATE LLC electronic information by communicating risk to senior administration, creating and maintaining enforceable policies and supporting processes, and ensuring compliance with regulatory requirements. To support these activities, the ISO coordinates activities with other departments, including the evaluation, procurement, and deployment of security-related products and develops and coordinates information security awareness and education programs for our Departments. Additionally, the ISO ensures that system-wide disaster recovery and incident response plans are in place.
MINIMUM ACCEPTABLE QUALIFICATIONS
Education: A Bachelor’s degree is preferred.
Experience: At least 4 years of varied information technology experience is required. Applicable experience includes, but is not limited to, computer and networking infrastructure, operating systems, application software development, project management, regulatory compliance, risk management, and providing training. Two years of direct experience in information security-related duties is required.
Skills: The ability to understand hardware and software systems is required. The ability to maintain confidentiality in regard to information processed, stored, or accessed by the systems is required. The ability to manage multiple concurrent projects and to reason analytically is required. The ability to work with and train people possessing differing levels of technical knowledge is required. Effective verbal and written communication skills and proficiency in writing technical specifications are required. The ability to develop knowledge of, respect for, and skills to engage with those of other cultures or backgrounds is required.
Other:Professional certification (CISSP, GIAC, CISA, CISM, etc.) is preferred.
ESSENTIAL DUTIES AND RESPONSIBILITIES
1. Creates information security strategies, both short-term and long-range, in support of the Company’s goals.
2. Directs an ongoing, proactive risk assessment program for all new and existing systems and remains familiar with the Company’s goals and business processes so effective controls can be put in place for those areas presenting the greatest information security risk.
3. Communicates risks and recommendations to mitigate risks to the senior administration by communicating in non-technical, cost/benefit terms and in a format relevant to senior administrators so decisions can be made to ensure the security of information systems and information entrusted to the Company.
4. Oversees all ongoing activities related to the development, implementation, and maintenance of the Company’s information security policies and procedures by ensuring these policies and procedures encompass the overall security of electronic information at rest or in motion within the CCPA, HIPAA, and GDPR.
5. Assists other departments to ensure regulatory compliance in areas such as the Payment Card Industry – Data Security Standards (PCI-DSS) and the Health Insurance Portability and Accountability Act (HIPAA), serves as the HIPAA Security Officer for the Company’s system and ensures full compliance in securing Protected Health Information (PHI).
6. Ensures vulnerabilities are managed by directing periodic vulnerability scans of servers connected to the Company’s networks and hosting servers.
7. Acts proactively to prevent potential disaster situations by ensuring that proper protections are in place, such as intrusion detection and prevention systems, firewalls, and effective physical safeguards, and provides for the availability of computer resources by ensuring a business continuity/disaster recovery plan is in place to offset the effects caused by intentional and unintentional acts.
8. Evaluates security incidents and determines what response, if any, is needed and coordinates the Company’s responses, including technical incident response teams, when sensitive information is breached.
9. Contributes to a work environment that encourages knowledge of, respect for, and development of skills to engage with those of other cultures or backgrounds.
10. Remains competent and current through self-directed professional reading, developing professional contacts with colleagues, attending professional development courses, attending training, conferences, and/or courses as directed by the supervisor, and obtaining certifications relevant to job duties.
11. Contributes to the overall success of the Company by performing all other duties and responsibilities as assigned.
Start Date: ASAP
Type: Full time
If you possess the required attitude, skills, and experience, seize the opportunity to become a part of our international community and apply today!
Please send your CV (in English) at careers@solaborate.com and the Job Title as Subject.
Bedri Pejani, Prishtinë, Kosovë
Shpallja ka skaduar
