Domain Lead ISMS

As the ISMS (Information Security Management System) Area Lead at YPTO, you will be responsible for overseeing the SNCB’s ISMS, providing guidance to the Information Security Steering Committee for implementation of information security policy in the organization. Additionally, you will act as an authority in developing, implementing, and maintaining the ISMS, and its policies, as well as the authority for appropriate audit conformity, in alignment with academic theories, industry standards, and legal requirements. Your role will also involve promoting cybersecurity awareness and best practices within the organization.

Continuous Improvement of the ISMS:

• Develop a repeatable and quantitative ISMS management process based on academic theories, industry standards, and models.

• Identify improvements to enhance the efficiency and consistency of the ISMS and policy management process through tooling.

• Ensure prioritization and quality assurance of tasks within the GRC team, the ISSG and the GRC team.

• Provide coaching and guidance to the CISO, GRC team and the ISSG, as needed.

Assist in the selection of new team members with the requisite qualifications and skills.

Improve and Maintain the ISMS policy management process:

• Enhance and maintain the GRC team's capabilities and services to SNCB.

• Align the ISMS and policy management process with other SNCB policy management processes.

• Manage all aspects of the lifecycle management of capabilities and services, including designing, implementing KPIs/KRIs, documenting procedures, identifying and addressing operational and quality risks to the program in cooperation with the Risk lead, and monitoring external suppliers.

• Report to internal stakeholders on KPIs, planning, capacity, and quality.

Knowledge Transfer:

• Collaborate with other leads of the GRC Team to enable synergies.

• Assist colleagues within the CISO office and Ypto in understanding information security and risk management.

• Mentor junior CISO team members to facilitate their professional development.