Information Security Lead  

The IT Security Lead is a member of the Information Security team and works closely with the other members of the IT team to develop and implement a comprehensive information security program. This includes defining security policies, processes, and standards. The IT Security Officer works with the IT department to select and deploy technical controls to meet specific security requirements, and defines processes and standards to ensure that security configurations
are maintained.

DUTIES AND RESPONSIBILITIES

• Responsible for implementing, managing and enforcing information security practices in Zuellig Pharma
• Ensures the ongoing integration of information security with business strategies and privacy requirements
• Works closely with the business to develop optimal application of technology functionality to meet the strategic security direction
• Leads information security awareness and training initiatives to educate workforce about policies, procedures and information risks
• Conduct risk analyses to assess the probability of risks occurring and the impact on the organization
• Ensures security in critical applications and its infrastructure is implemented and regularly monitored
• Performs ongoing security audits to assess effectiveness or policies/procedures and systems security safeguards
• Work with contractual and other activities with vendors, outside consultants, business associates, and other third parties to improve information security practices
• Leads the security incident response team in prevention, investigation, mitigation, and reporting activities; ensure appropriate enforcement sanctions for information security breaches
• Responsible for the maintenance of ISMS certification for ISG
• Performs coordination of countries obtaining ISMS certification
• Supports Computer Systems Validation for SAP implementation
• Performs other duties as assigned.

• Minimum of 5 Years of experienced in ISMS (ISO 27001) any related information security related.
• Experience in working in a multinational company BSECE, BS Accountancy, BS Computer Science, BSIT or any 4 related course
• Certified Information Systems Security Professional (CISSP), Certified Information Security Management (CISM)
• Ability to work with and through people to establish goals, objectives, and action plans
• In-depth knowledge and understanding of information risk concepts and principles, as a means of relating business needs to security controls
• Knowledge of and experience in developing and documenting security architecture and plans, including strategic, tactical and project plans
• Knowledge of common information security management frameworks, such as ITIL and COBIT frameworks
• Knowledge of the fundamentals of project management, and experience with creating and managing project plans, including budgeting and resource allocation
• In-depth knowledge of risk assessment methods and technologies
• Skilled in performing risk, business impact, control, and vulnerability assessments
• Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools
• Ability to develop, document, and maintain security policies, processes, procedures, and standards
• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls
• Strong verbal and written communication skills
• A strong customer/client focus, with the ability to manage expectations appropriately, to provide a superior customer/client experience and build long-term relationships