IT AND SECURITY COMPLIANCE OFFICER – FARFAN & MENDES; A CROSBIE MEMBER COMPANY

The candidate will be responsible for leading and managing the company’s information security program and ensuring compliance with relevant laws, regulations and industry standards.

·  Bachelor’s Degree in Computer Science, Information Technology or other related disciplines.

Master’s Degree would be considered an asset.

·  Proven three (3) years of experience in information security management, including developing and implementing security programs, implementing policies and controls in a complex IT environment.

·  Thorough understanding of relevant laws, regulations, standards, and frameworks related to information security and compliance.

·  CCNA/CCNP or similar certifications

·  PCNSA/E, NSE or similar certifications

·  Microsoft Certified Professional

·  Flexibility to be on-call 24/7 during critical/emergency support requests.

·  Implement and maintain an information security program to protect the confidentiality, integrity, and availability of the company’s information assets.

·  Conduct risk assessments, vulnerability assessments, and security audits to identify and prioritize security risks and vulnerabilities.

·  Implement security policies, standards, procedures, and guidelines to address security risks and ensure compliance with regulatory requirements.

·  Establish and maintain security awareness and training programs to educate employees about security policies, best practices, and emerging threats.

·  Ensure compliance with relevant laws, regulations, standards, and contractual obligations related to information security and privacy.

·  Conduct compliance assessments and audits to evaluate the effectiveness of security controls and processes and identify areas for improvement.

·  Prepare and submit compliance reports, certifications, and attestations to regulatory authorities, customers, and business partners as required.

·  Collaborate with internal stakeholders, legal advisors, and external auditors to address compliance requirements and remediate any compliance deficiencies or findings.

·  Develop and maintain a risk management program to identify, assess, and mitigate security risks across the organization.

·  Monitor regulatory developments, industry trends, and emerging threats to assess their impact on the organization’s security posture and compliance obligations.

·  Evaluate and manage security risks associated with third-party vendors, suppliers, and service providers, including conducting security assessments and due diligence reviews.