استخدام ایرانسل
شرکت ایرانسل در تهران جهت تکمیل کادر خود از واجدین شرایط زیر دعوت به همکاری می نماید:
| Description | job title |
| To coordinate with MTN Group on security risk activities and control standards to ensure aligned and consistent ISMS practices across the Group To research and stay abreast of the latest developments in the information security concept to identify related risks in a teleco/techco company To collaborate in definition and act upon OLAs with ITS and NWG for security risk actions to clarify ownership, timelines, and remediation outcomes To lead and execute executation the ISMS risk cycle under ISO/IEC 27001 and NIST CSF to maintain a prioritized and current risk register and treatment plan To lead and endure existence and proper second-line assurance on the ISMS based on risk cycle, confirming that risk identification, assessment, and treatment activities are properly executed by responsible teams, and that the risk register is accurate and up to dateTo track risk treatment plans with ITS/NWG control owners to closure to ensure residual risk stays within appetite. To monitor and drive closure of internal/external audit findings and management actions to prevent repeat findings and improve assurance To review the verified implemented measures of the required policies and controls to detect and address deviations and control gaps early To oversee the internal ISMS/security audits plan and spot checks to validate control design and operating effectiveness To define and enforce risk-based security checklists for new systems and ongoing operations to embed baseline controls pre-go-live and during BAU To benchmark security technologies, policies, and standards against Group and industry practices to identify targeted improvement opportunities To contribute in security awareness campaigns by providing risk scenarios and lessons learned to reduce human-factor risks and policy exceptions To review risk dashboards, heatmaps, and concise management reports to make timely, informed decisions and shape the insights for the Risk Committee and Leadership To own and govern the ISMS Risk Track documentation set, evidence library, and audit trail, ensuring end-to-end completeness, version control, and certification/assurance readiness through periodic QA and corrective actions. To govern alignment of the ISMS risk register with the Enterprise Risk Management (ERM) taxonomy and risk appetite, setting rules for escalations, acceptances, and transfers, approving or challenging exceptions, and ensuring all risk decisions are formally documented, time-bound, and traceable. To monitor educating related teams, and provide awareness regarding various ISMS risk issues. To oversee provisioning of assurance that Business Continuity Management (BCM) and Disaster Recovery (DR) plans are aligned with ISMS requirements, and to monitor their governance, testing, and risk treatment outcomes. Education: BSc. degree in Information Security / Cybersecurity or a related discipline Also below certificates are considered as advantage: ISO/IEC 27001 NIST Cybersecurity Framework (CSF) CISA (Certified Information Systems Auditor) CISSP (Certified Information Systems Security Professional) Experience: Minimum of 8 years’ experience in the area of specialization, with experience in supervising others Experience working in a medium organization |
ISMS Risk Anlysis Lead Specialist
|
| حداقل تحصیلات: کارشناسی حقوق و دستمزد: توافقی وضعیت نظام وظیفه: پایان خدمت, معافیت دائم مدت اعتبار: 1404/08/28 |
متقاضیان واجد شرایط می توانند با کلیک روی لینک تکمیل فرم استخدام، با انتخاب شغل مورد نظرشان رزومه خود را ارسال نمایند.