Ability to set standards for information security
Explaining the requirements, documentation and implementation of Information Security Management System (ISMS) based on ISO 27001:2013
Design documentation related to the ISO 2700:2013 standard (procedures, instructions, forms .)
Internal audit information security management system (ISMS) based on ISO 27001:2013
Auditing Information Security Management System based on ISO 27001:2013
Ability to develop and implement security standards and procedures
Ability to analyze, design and development of security issues in order to improve the system architecture
Mastering the basic concepts of information security
Ability to report incidents to the relevant director
Comprehensive understanding of design, implementation and maintenance of Security Controls, Security Policies, Procedures and Guidelines in ISOIEC 27001:2013 ISMS from scratch to achieve International Certificate
Deep understanding of Risk Management Process and related standards and best practices
Deep understanding of Business Continuity Process and related standards and best practices
Deep understanding of Physical Security and related standards and best practices
Determines security violations and inefficiencies by conducting periodic audits.
Keeps users informed by preparing performance reports; communicating system status. Implements security improvements by assessing current situation; evaluating trends; anticipating requirements
Experience in overseeing the development of information security systems, including the protection of data, assets and facilities
High level interpersonal skills with developed client relationship and negotiation experience
Previous experience in the coordination and execution of information security policies and controls, risk management systems and vulnerability assessment.
Afranet, is a public company operating within the IT sector in Iran. Headquartered in Tehran, it is one of the largest IT services companies in the country providing a range of products, capabilities and consulting services to a broad spectrum of business communities The company's current portfolio, includes broadband internet, data center, cloud services and e-commerce.