Data Protection Officer – ISO Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of, maintain, and update ISMS documentation, which includes policies, procedures, controls, and records.

• Oversee the ISMS through control monitoring, risk treatment, and ongoing enhancement.

• Provide guidance and assistance in completing Security Assurance Questionnaires from both prospects and clients.

• Develop internal capabilities for managing security questionnaires.

• Perform cybersecurity assessments and policy evaluations, identify deficiencies, and drive necessary remediation efforts.

• Organize and manage both internal and external ISO audits, as well as regulatory compliance audits.

• Collaborate with certification bodies and prepare the organization for surveillance and recertification processes.

• Appoint a representative for Cognassist's InfoSec and Estate Committee and engage in committee activities.

• Participate in quarterly GRCA meetings with leadership.

• Suggest and implement improvements for InfoSec governance, risk, and compliance programs.

• Provide consultancy for Data Protection Officer on an as-needed basis.

• Adhere to industry-standard security protocols while utilizing encrypted communications and secure networks.

⛳️ Requirements

• Proven experience in offering InfoSec and audit compliance consultancy, preferably within a SaaS or technology setting.

• Established record of maintaining and managing an ISO ISMS through certification and audit processes.

• Experience in completing Security Assurance Questionnaires and addressing customer and supplier security due diligence inquiries.

• Familiarity with Data Protection Officer duties, UK GDPR, and the Data Protection Act 2018.

• Relevant qualifications such as ISO Lead Implementer or Lead Auditor.

• Recognized data protection certification, such as BCS/CIPP.

• Excellent documentation skills.

• Capability to work independently with minimal supervision.

• Proficient in handling special category or sensitive personal data with the utmost care and confidentiality.

• Commitment to compliance with industry-standard security protocols, encrypted communications, and secure networks.

🏝️ Benefits

• Best possible benefits.

• Access to the latest tools.

• Supportive work environments.

• Emphasis on an inclusive culture and investment in people.