Senior Cybersecurity Accreditation Auditor

Role Overview

The Senior Cybersecurity Accreditation Auditor is tasked with managing daily accreditation operations, ensuring impartial and consistent assessments of third-party organizations. This position emphasizes compliance evaluations against both national and international cybersecurity benchmarks while overseeing application processes and safeguarding the accreditation system's integrity. The role also involves enhancing accreditation procedures and tools aligned with national cybersecurity policies.

Key Responsibilities

• Manage daily accreditation service activities efficiently.
• Keep comprehensive and organized documentation of all accreditation procedures to ensure accuracy and traceability.
• Uphold standards of competence, fairness, and consistency in all accreditation efforts.
• Conduct security standard compliance assessments.
• Administer national accreditation scheme applications operationally.
• Document findings clearly, based on objective evidence, ensuring they are understandable and traceable.
• Develop and update accreditation protocols and tools based on the National Information Security Compliance framework.
• Maintain impartiality and confidentiality, disclosing any conflicts of interest that might affect evaluation objectivity.
• Perform routine surveillance assessments on third parties to verify ongoing compliance.
• Create metrics and mechanisms to monitor compliance improvements.
• Stay knowledgeable about international standards and best practices (ISO27001, OWASP, PTES, SOC CMM, etc.) and implement experience pertaining to at least one standard.
• Understand local laws and regulations across sectors including Cybercrime, Personal Data Protection Law (PDPPL), eCommerce, among others.
• Possess knowledge of national cybersecurity standards and frameworks such as NIA and CSF.
• Keep abreast of new security trends, threats, and technologies to maintain accreditation relevance.
• Manage communication processes throughout assessments, from application submission to decision issuance.
• Serve as an escalation contact for accreditation-related queries or issues.
• Collaborate with team members to sustain and enhance the accreditation program.

Qualifications and Experience

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or an equivalent field.
• A minimum of 12 years of professional experience in Information Security, Cybersecurity, Risk Assessment, or Assurance roles.
• Practical expertise in information security auditing, accreditation, or cybersecurity management.
• Background in cybersecurity consulting or implementation aligned with recognized national or international standards is advantageous.

Preferred Certifications

• Certifications such as NIA Certified Auditor, CISSP, CISA, CISM, ISO 27001 Lead Auditor, or equivalents are favored.

Technical and Core Skills

• In-depth understanding of cybersecurity frameworks and standards including ISO 27001, NIST, NIA, OWASP, PTES, SOC-CMM.
• Familiarity with accreditation standards like ISO/IEC 17011, ISO/IEC 17025 and certification procedures.
• Competence in risk assessment and audit methodologies.
• Knowledge of cybersecurity legislation covering cybercrime laws, data protection, and eCommerce regulations.
• Acquainted with third-party audit and certification best practices.
• Capability to objectively analyze security controls and compliance against formal frameworks.
• Strong analytical problem-solving, excellent technical report writing, and documentation abilities.
• Effective communication with both technical teams and senior leadership.
• Experience in conducting training or workshops for knowledge dissemination.
• Detail-oriented with resilience to work under pressure and strict deadlines.

Behavioral Competencies

• Team-oriented with a collaborative approach.
• High ethical standards, impartiality, and professionalism.
• Ability to balance multiple priorities and manage diverse stakeholders.
• Strong interpersonal and communication skills.
• Self-motivated, proactive, and capable of working autonomously.

Additional Information

• Proficiency in English is required.
• Immediate availability is preferred.
• The contract extends for 12 months with potential for renewal depending on departmental needs.