GIZ

Regional Information Security Officer

Views: 453|Published on: Mar 04, 2026

NGO / INGO / Social work

Senior Level

Full Time

Vacancy: 1

GIZ Office, Kathmandu|

Experience: More than 5 years|

Not Disclosed

Position: Regional Information Security Officer (ISO) (m/f/d) for Nepal and Sri Lanka

Duty station: Kathmandu, Nepal

Main tasks:

Development of an ISMS

Implementing, coordinating, and continuously improving the local information security management system (ISMS) based on the ISMS country project plans
Coordinate, create and revise the security policies and related sub-concepts based on the context of the country or country region

Implementation of measures

Planning and coordinating the implementation of information security measures in close alignment with management level and key stakeholders such as HQ-ISMT (Information Security Management Team), IT Department, central Data Protection Team, and Digitalization Partner, local Security Risk Management Officer (SRMO) and projects
Support in the implementation and coordination of security-relevant processes
Monitor the effectiveness of the information security program and make recommendations for improvements to the departments of the country offices
Support and maintain incident management

Advising and reporting to management

Reporting on the local information security management system (ISMS) performance to local management level and HQ/ Chief Information Security Officer (CISO)
Reporting of security risks and issues to local management and HQ/CISO
Advising the local management and HQ/CISO how audit findings should be implemented

Internal audits and support on external audits

Develop an internal audit plan based on the audit program from HQ/ISMT
Support and conduct internal audits for the implementation of applicable security control objectives
Prepare and support the continuous improvement through the certification and surveillance audit
Contact person for all internal and external non-conformities in audits

Awareness and central contact person

Provide guidance and support to employees on information security best practices
Initiation and implementation of awareness-raising measures for information security in consultation with various stakeholders (such as IT professionals and local digitization partners)
Close interaction and communication to Headquarter ISM-Operations and relevant stakeholders

Qualifications:

The Information Security Officer is responsible for all information security issues in the Country Offices. S/he should have the following competencies and capabilities or acquire them over a reasonable period:
Master’s degree in Information Technology, Quality Management, or a related field, with expertise in IT security; certifications such as CISSP, CISM, or CISA will be additional advantage
Minimum 5 years’ work experience in an international organization, familiar with organizational structures and processes
Minimum 3 years of practical experience in implementing ISO/IEC 27001 or working as an ISO auditor, with solid knowledge of related standards, risk management, vulnerability management, and auditing methodologies
Basic knowledge of IT–management systems will be an asset
Excellent communication skills in English and the ability to network with key stakeholders and to work in a team are key requirements for this position
The ability to interpret standard ISO requirements for the local context and propose practical implementation measures is highly relevant for this role
Being proactive, having a commitment to life-long learning and staying up to date with security and threat-related trends by attending necessary further training is required
Independence, credibility, impartiality, and unconditional discretion are essential for the job
Travel to Sri Lanka and within Nepal to different project locations are required for this regional role.

Duty station and timeframe: The position will be based at GIZ Office in Kathmandu.

This will be a fixed-term contract, starting as soon as possible and running for one year (with possibility of extension).

The salary and social benefits will correspond to the rule applicable to GIZ national personnel in Nepal. Especially women and candidates from minority groups are encouraged to apply.

Applying Procedure

Click on Login to Apply to get the email address / external link to apply.

Note: You need to be a registered jobseeker to view the applying email address / external link.

Apply Before: Mar 18, 2026

About the organization

GIZ

Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH as a federal enterprise supports the German Government in achieving its objectives in the field of international cooperation. GIZ invites applications from suitable and qualified professionals for the GIZ Office Kathmandu. GIZ Office ensures consistent overall representation of the company and its successful positioning as a service provider for sustainable development. The Office coordinates and liaises closely with the German Embassy, and the Partner Institutions both from Government and civil society as well as with the private sector. It provides human resources management as well as financial and commercial support services for the Projects.
With around 25,000 employees, GIZ operates in more than 100 countries worldwide. In order to protect all valuable information processed by GIZ worldwide, it is necessary to establish an information security management system (ISMS). GIZ is currently implementing such a system based on the ISO/IEC 27001: 2022 standards. To further develop and operate the ISMS at GIZ Nepal and Sri Lanka, GIZ Nepal is seeking to recruit the following positions:

Why Create a Profile?

Get Personalized Job Recommendations
Apply Faster with Saved Details
Showcase Your Skills to Top Employers

Stand out and boost your chances of getting hired!

Similar JobsPowered by Merojob AI

Deadline: Mar 11, 2026

GIZ

Regional Information Security Officer

Views: 453|Published on: Mar 04, 2026

About the organization

GIZ

Why Create a Profile?

Similar JobsPowered by Merojob AI

Assistant Manager - QEHS

Accountant

Compliance Manager

FOR JOBSEEKER

FOR EMPLOYER

ABOUT US

CONTACT US

GIZ

Regional Information Security Officer

Views: 453|Published on: Mar 04, 2026

About the organization

GIZ

GIZ

Regional Information Security Officer

Views: 453|Published on: Mar 04, 2026

About the organization

GIZ

Why Create a Profile?

Similar JobsPowered by Merojob AI

Assistant Manager - QEHS

Accountant

Compliance Manager

Chief Human Resource Officer ...

Monitoring and Evaluation offi...

FOR JOBSEEKER

FOR EMPLOYER

ABOUT US

CONTACT US

GIZ

Regional Information Security Officer

Views: 453|Published on: Mar 04, 2026

About the organization

GIZ