ISO Officer

at  DBA

QUALIFICATIONS:

Graduate of bachelor’s degree in Quality Management, Engineering or Business Administration, or other relevant field.
Certification in quality management systems/ISMS (e.g., Certified ISO 9001 Lead Auditor/ISO 27001/19011) is highly desirable.
Has 2-3 years of relevant experience implementing and maintaining ISO standards, preferably in a similar role, is an advantage.
Strong understanding of quality management principles, methodologies, and tools (e.g., Six Sigma, Lean).
Excellent analytical, problem-solving, and decision-making skills.
Effective communication and interpersonal skills, with the ability to influence and collaborate across all levels of the organization.
Attention to detail and a commitment to ensuring compliance with regulatory requirements and industry standards.
Flexible and able to adapt to a rapidly changing environment.
Positive, self-motivated individual who can complete tasks independently.
Willing to be assigned to Subic Bay Freeport Zone

Lead the implementation of ISO 27001 standards across the organization, including the development of policies, procedures, and controls to protect information assets and ensure confidentiality, integrity, and availability.
Conduct thorough risk assessments to identify, analyze, and prioritize information security threats, and develop risk mitigation strategies to safeguard critical assets and data.
Draft, review, and update information security policies, standards, and procedures, ensuring alignment with ISO 27001 requirements and industry best practices.
Promote a culture of security awareness by providing impactful training programs that educate employees on information security best practices, policies, and compliance.
Establish and maintain procedures for reporting, investigating, and effectively responding to information security incidents and breaches.
Coordinate incident response activities to minimize damage, contain threats, and prevent recurrence.
Plan and conduct regular internal audits of the ISMS to evaluate its compliance in meeting ISO 27001 standards, legal requirements, and organizational policies.
Facilitate coordination with external auditors from certification bodies and regulatory agencies.
Ensure comprehensive and accurate documentation for information security policies, procedures, controls, and records, which includes regularly reviewing, updating, and communicating these documents to relevant stakeholders.
Evaluate the security posture of vendors, suppliers, and third-party service providers to ensure that they meet information security requirements and contractual obligations.
Conduct security assessments and audits, as needed.
Develop and deliver security awareness programs and training sessions to educate employees on information security risks, best practices, and compliance requirements.
Other duties as assigned.