Information Security Officer

at  Stibo Systems AS

ARE YOU PREPARED TO WORK WITH INFORMATION SECURITY COMPLIANCE IN A GROUP THAT WORKS WITH MANY INDUSTRY-LEADING COMPANIES AROUND THE WORLD? JOIN US AS INFORMATION SECURITY COMPLIANCE OFFICER AND ADD BUSINESS VALUE BY BRINGING YOUR AUDIT COMPETENCIES INTO PLAY.

“ At Stibo we continuously seek to improve our level of information security – not just because we want to protect ourselves, but also because we work with some of the most well-known brands in the world. In our field, we are faced by increased demands within information security compliance from both regulators and customers, and therefore we would like to extend our GRC-team with a compliance and audit specialist ” says CISO Martin Nielsen, Group Governance, Risk & Compliance.

THE ROLE AND THE COLLEAGUE WE ARE LOOKING FOR

We are looking for an Information Security Compliance Officer (/Lead Auditor) to carry out activities in relation to the relevant ISMS requirements (internal audits) but also other compliance controls and reporting to ensure the implementation of policies, procedures, and controls.

The tasks and responsibilities of our new colleague includes, but is not limited to:

• Conducting internal audits according to ISO 27001, incl. planning and coordination.
• Develop audit plans and programs.
• Develop audit reports and ensure follow-up on findings.
• Coordinate and participate in external ISO 27001 audits.
• Coordinate the annual ISMS audit.
• Contribute to and ensure continuous improvement of audit procedures in our matrix organization.

• Ensure continuous collaboration and knowledge sharing between standards (e.g. ISO 9001 and ISO 27701).Compliance reporting on e.g. CIS18.

IF YOU HAVE THE INTEREST, OTHER TASKS COULD ALSO BE A PART OF YOUR JOB DESCRIPTION:

• Facilitate and further improvement of post-incident activities.
• Plan incident response tests.
• General security incident reporting.

The Group GRC department is responsible for establishing and maintaining a high level of information security, quality and privacy standards, primarily covering the sister companies Stibo Systems and Stibo DX. Our work is based on the 3 pillars:

• Governance (e.g. Policies and procedures, awareness and aligning with business objectives)
• Risk (e.g. Risk management activities, incident response, supplier management)
• Compliance (e.g. Internal audits, KPI reporting and RFPs