Executive – Information Security and Compliance - LAUGFS Holdings Colombo 06

About the job

Job Summary

The Executive – Information Security is responsible for supporting the development, implementation, and maintenance of the organization’s information security strategy. This role ensures the confidentiality, integrity, and availability of information assets by enforcing security policies, managing risks, and supporting regulatory compliance efforts, including Sri Lanka’s PDPA and ISO 27001 standards.

Key Responsibilities:

• Monitor and respond to security events, alerts, and incidents.
• Perform routine security reviews, vulnerability assessments, and system hardening checks.
• Assist in developing, maintaining, and enforcing information security policies, procedures, and guidelines.
• Support compliance initiatives such as PDPA, ISO/IEC 27001, NIST, and internal audit requirements.
• Assist with risk assessments and the implementation of mitigation measures.
• Conduct security awareness training programs for employees, contractors, and stakeholders.
• Support phishing simulations and monitor training effectiveness.
• Maintain accurate records of IT security assets, access logs, and incident response documentation.
• Review and assess third-party/vendor information security controls.

Qualifications and Skills:

Education

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Postgraduate diploma or Master’s degree in Information Security (preferred but not mandatory).

Certifications (Preferred)

• CISSP, CISM, ISO/IEC 27001 Lead Implementer/Auditor, CompTIA Security+, or equivalent.

Key Skills:

• Strong understanding of information security principles, network security, and access controls. Familiarity with regulatory frameworks such as PDPA, GDPR, ISO 27001, NIST.
• Hands-on experience with SIEM tools, firewalls, antivirus, encryption, etc.
• Excellent documentation, communication, and analytical skills.
• Ability to handle sensitive/confidential data responsibly.

Experience:

• 2–5 years of experience in an Information Security, IT Governance, or IT Audit role.

Behavioral Competencies:

• High integrity and strong sense of responsibility
• Attention to detail and risk awareness
• Proactive mindset with ability to work independently
• Strong interpersonal skills and ability to collaborate across departments