IT security and Compliance Administrator

Job Summary

The Information Security ISO 27001 Compliance Administrator is responsible for owning, maintaining, and continuously improving the organization's Information Security Management System (ISMS) in alignment with ISO/IEC 27001:2022. This role ensures compliance, audit readiness, and effective governance across IT and business operations without directly owning day-to-day IT infrastructure implementation.

Responsibilities

ISO 27001 ISMS Management

• Own and maintain the ISMS framework in line with ISO/IEC 27001:2022
• Maintain risk register and risk treatment plans
• Maintain Statement of Applicability (SoA)
• Maintain ISMS policies, procedures, and standards
• Coordinate and support internal and external audits
• Track audit observations, non-conformities, and corrective actions to closure

Compliance Monitoring Evidence Management

• Continuously collect and maintain ISO evidence including: access reviews, backup verification, patch compliance, logging and monitoring records
• Ensure evidence is complete
• Ensure evidence is timely
• Ensure evidence is audit-ready
• Periodically review control effectiveness and report findings

Governance Risk Coordination

• Conduct periodic risk assessments with IT and business stakeholders
• Monitor compliance with security policies and procedures
• Escalate compliance gaps, risks, and control failures
• Support supplier security assessments and third-party risk reviews
• Support customer security assessments and third-party risk reviews
• Review latest CVE / vulnerabilities and analyze how it affect IT-infrastructure

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.