Information Security Officer

Position Overview

KalSoft is seeking a qualified Information Security Officer responsible for coordinating, monitoring, and ensuring compliance with information security requirements across the organization. The ideal candidate will possess strong knowledge of information security frameworks, risk management practices, and regulatory compliance standards.

Key Responsibilities

• Coordinate and monitor implementation of information security requirements, policies, and procedures across the organization.
• Serve as the primary owner and point of accountability for information security governance and compliance activities.
• Ensure organizational compliance with client security requirements, regulatory standards, and internal security policies.
• Conduct security risk assessments and identify potential vulnerabilities and mitigation strategies.
• Work closely with IT, infrastructure, compliance, and business teams to strengthen security controls and practices.
• Monitor security incidents, coordinate response activities, and support remediation efforts.
• Develop, review, and maintain information security policies, procedures, and awareness materials.
• Support audits, assessments, and compliance reviews related to information security.
• Provide guidance and recommendations on security best practices and risk management.
• Ensure proper documentation and reporting of security activities, incidents, and compliance status.
• Promote information security awareness and ensure employees adhere to security standards and procedures.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field.
• 4–6 years of experience in Information Security, Cybersecurity, or related roles.
• Strong understanding of information security principles, frameworks, and standards such as ISO 27001, NIST, or similar.
• Experience in security governance, risk management, compliance, and incident handling.
• Knowledge of security policies, procedures, and regulatory requirements.
• Ability to coordinate with cross-functional teams and manage stakeholder expectations effectively.
• Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent will be an advantage.
• Excellent analytical, communication, and problem-solving skills.
• Strong sense of ownership, accountability, and leadership in managing organizational information security.