ISMS & ISO 27001 Security Process Specialist

We offer
you an Ocean of Possibilities. Join our family. ISMS & ISO 27001 Security Process Specialist

Location:
DMESS Abu Dhabi UAE Department: Cyber Security/ Group IT Employment Type: Full-Time Shape the Future of Data & AI at Damen At Damen Shipyards Group we are strengthening our Information Security Management System (ISMS) and advancing our journey toward ISO/IEC 27001:2022 certification readiness. To support this strategic objective we are looking for a hands-on ISMS & Security Process Specialist who will help build structure document and operationalize our security management framework across the organization. This is not a role focused solely on compliance administration or policy maintenance. We are looking for someone who can take existing processes controls and ways of working and transform them into a structured auditable and sustainable Information Security Management System. You will work alongside the Group CISO and key stakeholders to establish the documentation process architecture evidence management and governance foundations required to support ISO/IEC 27001:2022 compliance and certification readiness. This is a unique opportunity to influence security maturity across a global maritime leader while helping to create a management system that is practical scalable and embedded into day-to-day operations. The Role As an ISMS & Security Process Specialist you will act as the operational driver behind Damens ISO/IEC 27001:2022 implementation efforts. You will identify existing security and IT processes document them formalize control activities establish traceability between risks and controls and ensure evidence can be consistently produced for audits and certification activities. You will work closely with Process Owners Control Owners IT Service Owners Quality Management teams Security stakeholders and business functions across the organization. Success in this role requires strong process documentation skills practical ISO 27001 knowledge attention to detail and the ability to transform fragmented information into a structured and auditable management system.

Key Responsibilities
Build & Maintain the ISMS Develop and maintain the Information Security Management System aligned with ISO/IEC 27001:2022Create policies procedures standards registers and governance documentationEstablish traceability between risks controls owners processes and evidenceSupport maintenance of the Information Security Risk Register and Statement of Applicability (SoA)Build sustainable governance structures that support certification readiness Document & Formalize Processes Identify existing security IT and governance processes across the organizationInterview stakeholders to understand how controls operate in practiceCreate process flows control descriptions workflows and supporting documentationTranslate operational activities into auditable and repeatable processesIdentify and remediate documentation and process gaps Support ISO/IEC 27001 Compliance Map existing practices against ISO/IEC 27001:2022 clauses and Annex A controlsPerform compliance and gap assessmentsDefine actions required to address identified deficienciesSupport control owners in documenting controls and evidence requirementsTrack remediation activities through to completion Develop the Security Management System Build and maintain security processes within Damens Mavim platformStructure relationships between controls risks evidence systems and stakeholdersEnsure information security requirements are embedded into business processesMaintain process ownership version control and review cyclesSupport continuous improvement of the management system Manage Evidence & Audit Readiness Establish and maintain the ISMS evidence repositoryCoordinate the collection and validation of audit evidenceEnsure evidence remains current complete and accessibleSupport internal audits certification audits and management reviewsTrack findings corrective actions and improvement initiatives Drive Continuous Improvement Promote best practices in security governance and process managementSupport stakeholders in adopting structured and sustainable controlsFacilitate workshops and working sessions across the businessTranslate ISO requirements into practical business guidanceImprove ISMS maturity audit readiness and process effectiveness What Were Looking For Experience 4-7 years of experience in Information Security ISMS IT Governance GRC IT Service Management Quality Management or Process ManagementPractical experience implementing or maintaining an ISO/IEC 27001-compliant management systemExperience documenting processes controls procedures and governance frameworksExperience supporting internal audits certification audits or compliance assessmentsExperience working within complex international organizationsExperience with BPM or process management tools such as Mavim ARIS Signavio Visio or similar platforms Technical Expertise ISO/IEC 27001:2022 FrameworkInformation Secu