Information Security Officer - Hybrid

Title: Information Security Officer - Hybrid

Mandatory skills:

information security, policy development, compliance,
security frameworks, NIST, ISO 27001, CIS Controls,
information security policies, policy repository, policy interpretation, policy implementation,
documentation, training, audits, operational consistency,
Compliance Management, Risk Management, recommend mitigation strategies,
security awareness programs, training materials, emerging threats, emerging technologies, security policies, security procedures, security posture

Description:

Security Architect - Advanced.

We re seeking a proactive and detail-oriented Information Security Officer to lead the implementation of security policies and procedures across our organization. This role is critical in shaping our security posture, ensuring compliance with industry standards, and fostering a culture of security awareness.

Key Responsibilities:
Review and implement new information security policies that have been developed for client.
Collaborate with stakeholders to ensure policies are practical, enforceable, and tailored to organizational needs.
Maintain a comprehensive policy repository and ensure timely updates.
Translate high-level policies into actionable procedures and guidelines for technical and non-technical teams.
Develop clear, concise documentation that supports training, audits, and operational consistency.
Ensure procedures are accessible and understandable across departments.
Compliance & Risk Management
Monitor compliance with internal policies and external regulations
Conduct risk assessments and recommend mitigation strategies.
Support internal and external audits by providing documentation and evidence of compliance.
Assist in developing security awareness programs and training materials.
Provide guidance and support to teams on policy interpretation and implementation.
Stay current with emerging threats, technologies, and best practices.
Recommend enhancements to existing policies and procedures based on evolving risks and feedback.

Qualifications:
A Bachelor s Degree in information technology, computer science, related technical field, or an Associate s Degree in information technology, computer science or related field and two years of relevant work experience, or a High School Diploma with five years of relevant work experience.
3+ years of experience in information security, policy development, or compliance.
3+ years of experience with security frameworks (e.g., NIST, ISO 27001, CIS Controls).
Excellent writing and communication skills.
Certifications such as CISSP, CISM, or ISO 27001 Lead Implementer are a plus.

VIVA USA is an equal opportunity employer and is committed to maintaining a professional working environment that is free from discrimination and unlawful harassment. The Management, contractors, and staff of VIVA USA shall respect others without regard to race, sex, religion, age, color, creed, national or ethnic origin, physical, mental or sensory disability, marital status, sexual orientation, or status as a Vietnam-era, recently separated veteran, Active war time or campaign badge veteran, Armed forces service medal veteran, or disabled veteran. Please contact us at for any complaints, comments and suggestions.

Contact Details :

VIVA USA INC.
3601 Algonquin Road, Suite 425
Rolling Meadows, IL 60008