About This Role
This role is for a Security Manager who will be responsible for managing ISMS certification audits and responding to requests from various external organizations. The ideal candidate will have experience in information security and a strong understanding of relevant laws and regulations.
Responsibilities
- Respond to ISMS certification audits and manage follow-up actions
- Respond to official documents from related organizations such as the Korea Communications Standards Commission (KCSC) and KISA, and data requests from investigative agencies
- Respond to client security inspection requests, review consignment contracts, and handle vulnerability reports
- Process personal information and security inquiries, including requests for deletion of member personal information and reports of cloud misuse
- Update information protection policies, guidelines, and procedural documents
- Operate information protection training and conduct internal security inspections
- Review technical security control items in collaboration with the infrastructure and development teams
Requirements
- 2+ years of practical experience in information protection/security
- Experience responding to ISMS or ISO 27001 certification audits
- Understanding of relevant laws and regulations, including the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.
- Experience in creating and managing information protection policy documents
- Basic understanding of IT service environments (cloud, SaaS)
Nice to have:
- Security certifications such as ISMS Auditor, CISSP, CISM
- Experience participating in ISMS certification audit responses in a SaaS/e-commerce environment
- Experience responding to global certifications such as SOC2, ISO 27001
- Basic understanding of AWS environment
- Ability to communicate technically with development and infrastructure teams
- Experience conducting security incident response simulations
- Experience participating in the establishment of an information protection system in a growing service environment
Application Process
- Application screening
- 1st job interview
- 2nd Culture Add interview
- Final offer
- For the application screening, please focus on your career experience rather than content unrelated to work, such as date of birth, photos, or salary information
- The job interview is a time to discuss job-related topics with future team members
- The Culture Add interview involves a 45-minute discussion with the People Team Lead and a 30-minute discussion with the CEO, focusing on your organizational culture fit and the value you can add to the company's culture
