Information Security Officer

**About Us**:Join the prestigious Deutsche Gesellschaft für Internationale Zusammenarbeit GmbH (GIZ) on a global mission to protect valuable information and pave the way for a secure future As a key player working in over 100 countries, GIZ collaborates with the German Government to drive economic development, green transformation, and peace worldwide. Now, you have the chance to be part of the vital Information Security Management System (ISMS) implementation.

Become a trailblazing Information Security Officer (ISO) in the vibrant South Africa, Lesotho, and Eswatini offices. Your role will involve coordinating with top-notch professionals, ensuring compliance with ISO/IEC 27001 standards, and assessing information security risks. Embrace this incredible opportunity to safeguard crucial data and leave a lasting impact on global security. Join us now and be at the forefront of a brighter, safer world with GIZ.

**The Information Security Officer (ISO)** plays a crucial role in GIZ's South Africa, Lesotho, and eSwatini operations, collaborating closely with the ISM team at GIZ Headquarters in Germany. Tasked with implementing and maintaining the information security management system, the ISO provides expert guidance to all units of the Pretoria Country Office and various projects. Emphasizing organizational, physical, people, and technological aspects, the ISO ensures the effective implementation of established policies and measures, acting as a facilitator and advisor throughout the process. With a focus on continuous improvement, the ISO safeguards the integrity and security of valuable information for the organization's success.

Join GIZ's vibrant team in the heart of Hatfield, Pretoria, at the South Africa / Lesotho / eSwatini Country Office. As part of our global network, you'll experience an inclusive and diverse environment, where genuine equal opportunities are embraced. At GIZ, we uphold gender equality, diversity, and inclusion, as we are a proud signatory of the Diversity Charter.

This exciting position offers a contract period of twenty-four (24) months, providing you with an opportunity to make a significant impact within our dynamic organization. Join us now and be a part of our mission to create positive change worldwide.

**Unlock Your Potential with the Following - Professional Experience & Qualifications**
- Qualifications:_
- Masters/MSc degree in Information Security or Information Technology

**Professional Experience**
- Minimum 5 years' professional experience in an international organization
- 3 years' work experience in corporate risk management
- Expertise in vulnerability management
- Proficient in moderation, interviewing, and mediation
- Knowledge and experience in ISO/IEC certification and audits
- Methodological competences in information security, particularly ISO/IEC 27001 and related standards

**Empowering Excellence: Tasking the Visionary with Key Responsibilities**
- Development of an ISMS:_
- Implementing, coordinating, and continuously improving the GIZ South Africa, Lesotho, and eSwatini security management system (ISMS) based on the ISMS country project plans. - Creating, coordinating, and revising the security policies, SOPs, and related sub-concepts adapted to the context of GIZ South Africa, Lesotho, and eSwatini.
- Implementation of Measures:_ - Plan and coordinate the implementation of information security measures, closely aligned with the management level and key stakeholders, such as HQ-ISMT, IT Department, central Data Protection Team, Digitalization Partner, and local Security Risk Advisor (SRMO) from projects. - Support the implementation and coordination of security-relevant processes.
- Establish a reporting process for security-relevant incidents and conduct investigations within the country office and with HQ/ISMT. - Monitor the effectiveness of the information security program and provide recommendations for improvements to the country office departments or commissioning manager. - Support and maintain incident management.
- Aid in establishing an incident management process.
- Assist in evaluating incidents and defining the next steps within the country office.
- Involve all relevant parties and communicate incidents to the CISO/ISM-T.
- Secure evidence after a security incident.
- Advising and Reporting to Management:_ - Report the performance of the local ISMS to the local management level and HQ/CISO. - Notify local management and HQ/CISO of security risks and issues. - Advise local management and HQ/CISO on implementing audit findings.
- Internal Audits and Support on External Audits:_ - Develop an internal audit plan based on the HQ/ISMT audit program. - Support and conduct internal audits for the implementation of applicable security control objectives. - Prepare for and support continuous improvement through certification and surveillance audits. - Act as the contact person for all internal and external non-conformities in audits.
- Awaren