ADVISOR FOR INFORMATION SECURITY

For our client, one of the most successful private investment groups in the western Balkans region, we are in search for an external advisor with acknowledged experience in managing enterprise cyber-security and information security.

The advisor will help the Group with his/ her independent advice on cybersecurity environment, provide objective advice and expertise and propose investments needed to best approach cybersecurity risks mitigation, as well as understand where improvements are needed in people, processes, and technology.

 

SCOPE OF WORK

• Advise on the current risk exposures of the Group in respect of information security.
• Advice on best practices and measures in similar corporate environments and industries, while factoring latest technological and cyber security global developments.
• Guidance to designing and implementing an IS development strategy and governance structure (if needed).
• Give advice through the efforts and emergency response in cases of major cyber security events in aligning the activities and involvement of respective stakeholders.
• Review and recommend information security policies and programs, as well as proposed changes or introduction of new ones.
• Review the effectiveness of information security program implementation
• Provide clear direction and visible management support for information security initiatives
• Advice on best plans and programs to maintain information security awareness
• From time-to-time conduct assessment that information security activities are executed in compliance with the respective policy
• Recommend how to handle non-compliance with information security policy
• Assess and recommend approval/change/removal of methodologies and processes for information security implementation
• Propose capital investments in improving the IS infrastructure to keep it up to date with the latest technological developments