Information Security (ISMS) Implementation Specialist

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire Information Security (ISMS) Implementation Specialist This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

Notice Period: Immediate-15 days

Contract: Longterm Contract

Work: UAE-Hybrid

Exp:10+ Years

Job Description Job Summary:

Position Overview

We are seeking an Information Security (ISMS) Implementation Specialist to support the execution of our Information Security Action Plan. The role focuses on hands-on implementation and operational execution of security processes in alignment with ISO/IEC 27001 (ISMS) and corporate standards.

This is a non-strategic, execution-focused role, requiring a reliable professional who can deliver assigned tasks on time with strong commitment and accuracy.

Required Profile

Core Requirements

• Solid understanding of ISMS / ISO/IEC 27001 principles and controls
• Practical experience in ISMS implementation, preferably in a large scale company (i.e. approximately 1,000 employees)
• Proven track record of playing a leading or key execution role in ISMS initiatives
• Strong execution capability with a high level of commitment to deadlines and task completion
• Proficient in English (written and verbal)

Preferred (Optional)

• Hands-on experience with IT infrastructure (PCs, servers, and network devices)
• ISMS Implementer certification or equivalent qualification

Not Required

• Strategic planning capabilities
• Large-scale program or project management leadership
• Proposal for a Customized ISMS Implementation Approach (by own experience)

Key Responsibilities

1. Cybersecurity Awareness Training follow-up

• Aggregate and analyze results of cybersecurity awareness training (including phishing simulations and e-learning)
• Conduct follow-ups to ensure completion and improvement

2. Security Incident Response Procedure Implementation

• Educate IT members on Global/Localsecurity incident response procedures
• Promote awareness local activity and adoption across the organization

3. Vulnerability Management Process Implementation

• Understand corporate vulnerability management processes
• Identify and define local-specific procedures
• Implement and integrate processes into local IT operations
• Execute ongoing vulnerability management activities

4. Cybersecurity resilience Backup & Recovery

• Understand corporate backup management standards
• Current Backup & Recovery State Assessment
• Gap Analysis vs HQ Backup Standard
• Define Minimal Improvement Actions (Fit-for-Purpose)
• Perform restore testing and document results

5. Implement Asset management process (for local scope)

• Understand corporate digital asset management processes
• Gap Analysis Against Current Operations (Reality-Based)
• Identify local procedural needs
• Lightweight Documentation of Local Processes (including Unauthorized Software Inventory & removing process)
• Implement and operate within local IT workflows

6. Onboarding Risk management process (for local asset)

• Understand DENV existing process and procedure
• Register local asset risk (where needs)

7. Access control reviews and remediations (for local asset)

• Understand corporate access control processes
• Define and implement local procedures
• Ensure execution within IT operations

8. Security Maturity Assessment

• Prepare and submit evidence for security maturity assessments

9. Knowledge Transfer

• Provide structured knowledge transfer to internal IT members
• Ensure sustainability of implemented processes

Key Competencies

• Strong execution and delivery mindset
• Detail-oriented with high accuracy and accountability
• Ability to work independently with minimal supervision
• Practical and hands-on problem-solving skills
• Effective communication and coordination skills

Outcome Expectations

• Successful implementation of priority ISMS processes
• Measurable improvement in operational security practices
• Completed deliverables within defined timeline
• Clear documentation and knowledge transfer to internal teams

WHAT'S ON OFFER:

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to [Confidential Information] Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Varra Chaitanya

Avensys Consulting Pte Ltd EA Licence 12C5759

Privacy Statement: Data collected will be used for recruitment purposes only. Personal data provided will be used strictly in accordance with the relevant data protection law and Avensys privacy policy