It And Data Security Officer

 

Description:

 

 

Essential Skills for an IT & Data Security Officer

· Experience working on Linux and Windows based infrastructure

· Enterprise/Large Company management experience managing remote resources.

· Experience with Vulnerability Assessments and Penetration Testing

· Experience with Breach Reporting & Documentation

· Experience with implementing SOC2 Certification requirements

· Experience with implementing ISO 270001 Certification requirements

· Experience with HIPAA requirements

· Experience with GDPR requirements

· Familiarity with 21CFR Part 11

· Excellent troubleshooting

· Working knowledge of various tools, open-source technologies, and cloud services

· Awareness of critical concepts in IT & Data Security

· Experience as an IT & Data Security Officer

· Excellent interpersonal communication skills

· Problem-solving attitude

· Collaborative team spirit

· Must have Azure and AWS certifications regarding IT & Data Security

 

IT & Data Security Officer Job Description: Roles and Responsibilities

· Implementation of Vulnerability Assessment, Testing, Reporting, and Mitigation

· Implementation of Penetration Testing, Reporting, and Mitigation to detect system flaws

· Implementation of IT & Data Security Policies & Procedures to provide network & data protection from security breaches

· Implementation of IT & Data Security Policies & Procedures to ensure compliance with the IT & Data Security Requirements of SOC2 and ISO 270001 Certifications, as well as compliance with HIPAA and GDPR.

· Implementation of IT & Data Security Policies & Procedures to ensure compliance with 21CFPR Part 11

· Experience Monitoring Network Usage to ensure compliance with established security policies and industry standards.

· Collaborate with IT Department and Management to enhance Security Measures

· Collaborate with Quality Assurance Department to draft and improve required security policies & procedures.

· Implementing various development, testing, automation tools, and IT infrastructure

· Management & Compliant Documentation of Security Breaches including those necessary to Legal for appropriate action as well as undertaking root cause analysis

· Managing stakeholders and external interfaces

· Set up IT & Data Security tools and required infrastructure

· Assist with Security Strategies in the IT Development & Data Protection Process

· Training staff on security protocols and best practices