Information Security Administrator

Seeking an experienced

to support and strengthen its Information Security function.

The successful candidate will be responsible for administering day-to-day information security operations, ensuring compliance with governance frameworks, managing security policies and standards, and supporting risk management initiatives across the organization.

Working closely with the

, the role will collaborate with an internal Information Security team and a Managed Security Operations Center (SOC) partner to ensure the confidentiality, integrity, and availability of the organization's information assets while maintaining compliance with regulatory and industry standards.

• Administer and oversee daily Information Security operations across the organization.
• Coordinate with the internal Information Security team and Managed SOC partner to monitor, assess, and respond to security events.
• Support incident management, vulnerability remediation, and security monitoring activities.
• Ensure effective implementation of security controls across IT infrastructure and business applications.

• Support and maintain the organization's Information Security Governance, Risk, and Compliance (GRC) framework.
• Conduct security risk assessments and monitor mitigation plans.
• Manage third-party/vendor security risk assessments and compliance reviews.
• Ensure compliance with internal security policies, regulatory requirements, and industry standards.
• Support audit activities and closure of audit findings.

• Draft, review, update, and maintain Information Security policies, standards, procedures, guidelines, and Standard Operating Procedures (SOPs).
• Ensure documentation remains aligned with evolving regulatory and business requirements.
• Promote awareness and adherence to Information Security policies across the organization.

• Participate in Information Security governance initiatives.
• Support data protection and privacy-related projects.
• Assist in AI governance and emerging technology security initiatives.
• Monitor compliance with established security frameworks and regulatory obligations.

• Identify, assess, and monitor information security risks.
• Recommend appropriate security controls to mitigate identified risks.
• Support business continuity planning and disaster recovery governance activities.
• Participate in Business Impact Analysis (BIA) and continuity planning exercises.

• Collaborate with IT Infrastructure, Application, Risk, Compliance, Audit, and Business teams to implement security controls.
• Coordinate with external auditors, regulators, consultants, and third-party vendors as required.
• Provide Information Security guidance and recommendations to business stakeholders.

• Monitor emerging cybersecurity threats, vulnerabilities, and industry best practices.
• Recommend improvements to security processes, controls, and governance practices.
• Support security awareness initiatives and contribute to building a security-focused culture.

• Bachelor's Degree in:
• Information Security
• Cyber Security
• Computer Science
• Information Technology
• Computer Engineering
• or a related discipline.

Candidates holding one or more of the following certifications will be preferred:

• ISO/IEC 27001 Lead Implementer or Lead Auditor

• CompTIA Security+
• Certified in Risk and Information Systems Control (CRISC)

(Advantage)

• 5–6 years

of relevant experience in Information Security, Governance, Risk & Compliance (GRC), or Cyber Security.

• Experience working within regulated industries such as Insurance, Banking, Financial Services, or Healthcare is preferred.
• Experience supporting Managed Security Operations Center (SOC) environments is an advantage.

• Regulatory Compliance

• Vulnerability Management

• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• High attention to detail and documentation skills.
• Strong understanding of security governance principles.
• Ability to manage multiple priorities in a fast-paced environment.
• Collaborative team player with a proactive approach to security improvement.

Candidates with experience in the following environments will be preferred:

• Insurance

• Healthcare