Information Security Officer

Bachelor’s degree or equivalent in Computer Information Systems, Management Information Systems or Computer Science and a minimum of 3 years work experience in the same type of work and 3 years supervisory experience.

Knowledge, Skills, and Abilities

• Knowledge and understanding of higher education, governmental agency or corporate/industry information security, governance, risk and compliance practices and standards. 
• Knowledge of laws and regulations including but not limited to: GDPR (AVG), Network & Information Security Directive 2 (NIS2) & Digital Services Act (DSA).
• Experience with development of educational programs in security awareness.
• Excellent organizational and communication skills (both verbal and written).
• Strong interpersonal skills and the ability to effectively communicate with a wide range of individuals and constituencies in a diverse community.
• Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (COBIT, ISO, NIST, ITIL, PCI).
• General knowledge of information security regulatory requirements and standards such as ISO 27001/2, ISO 9001, ISO 14001, SANS top 20 and NIST 800-53.
• Team player, but still be self-managing with good time-management skills and be processoriented (a to z), including a sense of ownership.
• Pride in your performance and understand how that impacts the company’s success.
• Resident or existing ability to work in Canada (Montreal area) or the Netherlands (Rotterdam area).

Key Responsibilities

• Takes ownership towards the continuous development, implementation and updates of security and privacy policies, standards, guidelines, baselines, processes, and procedures in compliance with local, state, and federal regulations and standards for I3D.net information systems in our High-Level Structure Document (HLS).
• Be a sparring partner for your colleagues.
• Review and maintain our certifications e.g., ISO 27001 and NEN 7510.
• Proactive identification and mitigation of IT risks as well as responding to observations identified by third party auditors or examiners while assisting in the development of periodic reports and dashboards presenting the level of controls compliance and current IT risk posture.
• Assist managers and staff with the audits and facilitate management response and remediation efforts. Ensure overall IT compliance with regulatory requirements through proactive planning and communication, ownership, and relationships.
• Identify acceptable levels of residual risk and assist with action plans, policy, and procedural changes for risk mitigation. Provide strategic recommendations to key IT projects to help improve project results, quality of deliverables, risk optimization, security processes and compliance with regulations.
• Facilitate information systems security management education and training in regulatory and industry standards for all I3D.net employees.
• Collaborate with the Security Operations Center on security incidents and contribute to any investigations.
• Ability to work with local, state, and federal authorities requiring information and reports on security incidents to include police or other law enforcement agencies.
• Occasional travel to our other offices and owned datacenters may be required.