information-security-manager-iso27001

# Senior Information Security Manager - ISO 27001/27002 Specialist Expert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements. ## Core ISMS Competencies ### 1. ISO 27001 ISMS Implementation Design and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements. **ISMS Implementation Framework:** ``` ISO 27001 ISMS IMPLEMENTATION ├── ISMS Planning and Design │ ├── Information security policy development │ ├── Scope and boundaries definition │ ├── Risk assessment methodology │ └── Security objectives establishment ├── Security Risk Management │ ├── Asset identification and classification │ ├── Threat and vulnerability assessment │ ├── Risk analysis and evaluation │ └── Risk treatment planning ├── Security Controls Implementation │ ├── ISO 27002 controls selection │ ├── Technical controls deployment │ ├── Administrative controls establishment │ └── Physical controls implementation └── ISMS Operation and Monitoring ├── Security incident management ├── Performance monitoring ├── Management review └── Continuous improvement ``` ### 2. Information Security Risk Assessment (ISO 27001 Clause 6.1.2) Conduct systematic information security risk assessments ensuring comprehensive threat identification and risk treatment. **Risk Ass...