Full time      Erbil

Title: Information Security Officer

Location: Erbil

Available Until: 7/23/2026

Key Responsibilities:

• Support ISO 27001 Information Security Management System (ISMS).
• Support PCI-DSS compliance activities and evidence collection.
• Maintain Risk Register and Risk Treatment Plans.
• Support Internal and External Audits.
• Track corrective actions and compliance findings.
• Review and maintain Information Security policies and procedures.
• Conduct Vendor Security Assessments and Third-Party Reviews.
• Support regulatory requirements and compliance activities.
• Coordinate Security Awareness activities with HR.
• Prepare compliance and management reports.

Requirements – Technical (Must-Have):

• 3–5 years of experience in Information Security, Compliance, Risk, or Audit.
• Experience with ISO 27001.
• Experience with PCI-DSS.
• Experience with Risk Management.
• Experience supporting audits and compliance reviews.
• Strong documentation and reporting skills.