Information Security and Business Continuity Officer

Ambience Services

. Design, deploy, and maintain information security and business continuity policies, standards, and procedures aligned with ISO 27001 and ISO 22301 .

Posted 10/15/2026full-timeTavros • GreeceMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and maintaining information security and business continuity policies aligned with ISO standards, while effectively managing compliance processes and risk assessments. Proven ability to lead training initiatives and promote a culture of security awareness across the organization.

Highest-signal resume keywords

ISO 27001 CertificationISO 22301 CertificationInformation Security ManagementRisk AssessmentStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityBusiness ContinuityRisk AssessmentDisaster Recovery TestingIncident ManagementVulnerability AssessmentPenetration TestingEnterprise Security ArchitectureKPI TrackingTechnical Reporting

Soft Skills

LeadershipCommunicationInfluencingStakeholder Management

Certifications & Qualifications

CISMCISSPISO 27001 LAISO 27001 LIISO 22301 LAISO 22301 LI

Industry Keywords

ISO 27001ISO 22301GDPRBusiness Impact AnalysisThird-Party Risk Management

About the role

Key responsibilities & impact

Design, deploy, and maintain information security and business continuity policies, standards, and procedures aligned with ISO 27001 and ISO 22301
Lead end-to-end certification and continuous compliance processes for ISO 27001 and ISO 22301
Serve as the primary interface for external auditors
Conduct security risk assessments, Business Impact Analyses (BIA), and Disaster Recovery (DR) testing
Establish a Third-Party Risk Management framework to control vendor-related exposure
Define, track, and analyze KPIs and metrics
Transform complex technical risks into actionable reporting for Top Management
Develop and execute organization-wide training programs covering security, privacy, and operational resilience
Ensure alignment with applicable legal, regulatory, and privacy requirements, including GDPR
Promote a culture of security awareness and business continuity across the organization

Requirements

What you’ll need

5+ years of progressive experience in Information Security or CISO-level responsibilities, preferably within fast-paced or scale-up environments
Hands-on track record of successfully obtaining and maintaining ISO 27001 and ISO 22301 certifications
Deep knowledge of ISO standards (27001, 22301, 27018, 27701) and regulatory frameworks (GDPR)
Operational familiarity with Incident Management, Vulnerability Assessments, Penetration Testing, and Enterprise Security Architecture
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a relevant technical discipline
Required Certification (at least one): CISM, CISSP, ISO 27001 LA/LI, or ISO 22301 LA/LI
Proven ability to balance strategic risk evaluation with tactical execution
Strong stakeholder management skills; ability to communicate technical concepts to both Top Management and engineering teams
Leadership capacity to influence cross-functional teams without direct authority

Benefits

Comp & perks

Competitive renumeration package
Private medical insurance
Performance based bonus
Training & development opportunities
A team that loves innovation, quality, and having fun at work
Work-life balance