Information Security Officer
关于公司 我们的客户是罗马尼亚领先的商业软件解决方案 (ERP,HCM,CRM,BI) 的提供者之一。他们旗舰产品 Charisma ERP 和 Charisma HCM 是市场领导者，服务于金融服务，零售，分销，生产，建筑，农业，医疗和服务行业中的企业。与45个国家项目以及不断增长的国际足迹，它们继续在全球范围内创新和扩张。关于角色我们正在寻找一个信息安全官员 (ISO) 来实施网络安全战略，确保保护内部系统和客户数据。负责安全和监管的管理，并与国际信息安全组织进行安全分析，审计，认证和重新认证。ISO 将向首席风险和合规官报告，并与跨职业团队密切合作以确保安全和监控合规。责任 ·领导内部 InfoSec 项目，推动战略安全计划 ·为组织及其软件交付团队制定和实施安全政策和程序 ·对 ISO 27001,NIS,SOC 和其他国际 InfoSech 标准的遵守进行安全分析和认证以及再认证。·为客户提供定制的网络安全咨询和解决方案 ·监督国家和欧洲网络安全法规并实施积极战略以确保遵守 •与内部团队合作评估安全风险，制定缓解策略 需要技能 ·在类似的 InfoSec 领导角色中至少有2-3年的经验 ·与行业最佳实践一致的安全策略开发和执行强大的专业知识 ·对风险评估，合规框架和网络安全治理的经验 ·英语和罗马尼亚语言的优秀沟通技巧，具有所有组织层面的参与能力 ·分析思维，解决问题能力强，细节关注 · 在解决问题的环境中创造性和主动工作的能力
查看英文原文
About the Company
Our client is a leading provider of business software solutions (ERP, HCM, CRM, BI) in Romania and one of the top 10 global software providers for the leasing industry. Their flagship products, Charisma ERP and Charisma HCM, are market leaders, serving businesses across financial services, retail, distribution, production, construction, agriculture, medical, and service industries. With projects in 45 countries and a growing international footprint, they continue to innovate and expand globally.
About the Role
We are looking for a Information Security Officer (ISO) to implement the cybersecurity strategy, ensuring the protection of both internal systems and customer data. This role involves developing and implementing security policies, conducting audits and compliance certifications, and driving strategic initiatives in information security. The ISO will report to the Chief Risk and Compliance Officer and work closely with cross-functional teams to ensure security and regulatory compliance.
Responsibilities
- Lead internal InfoSec projects and drive strategic security initiatives
- Develop and implement security policies and procedures for the organization and its software delivery teams
- Conduct security analyses, audits, certifications, and re-certifications for compliance with ISO 27001, NIS, SOC, and other international InfoSec standards
- Provide customized cybersecurity consulting and solutions for clients
- Monitor national and European cybersecurity regulations and implement proactive strategies to ensure compliance
- Collaborate with internal teams to assess security risks and develop mitigation strategies
Required Skillset
- Minimum 2-3 years of experience in a similar InfoSec leadership role
- Strong expertise in developing and executing security strategies aligned with industry best practices
- Experience in risk assessment, compliance frameworks, and cybersecurity governance
- Excellent communication skills in English and Romanian, with the ability to engage at all organizational levels
- Analytical mindset, strong problem-solving skills, and attention to detail
- Ability to work creatively and proactively in a problem-solving environment
Originally posted on Himalayas