Information Security Executive

Maintain and continuously improve the organization's ISMS in alignment with ISO/IEC 27001 . Coordinate internal and external ISO audits , including audit preparation, evidence collection, and closure of observations. Conduct information security risk assessments and maintain the risk register and risk treatment plans. Develop, review, and maintain information security policies, procedures, standards, and guidelines . Coordinate the implementation and monitoring of ISO 27001 Annex A controls .