Chief Information Security Officer

Role & responsibilities

1. To create, maintain and disseminate information security strategy, plans and policies

to ensure high information assurance within the APCFSS and meet legal, statutory and

regulatory requirements in Information Security.

2. At least 25% of the APCFSS resources, drawn from within the existing team are fully

equipped to work on Security framework and act as System Internal Auditors.

3. Developed Security information Health Dashboard for all the Applications in APCFSS

and enable access to all the senior management team for monitoring.

4. Building a strong network of connections who can support collaboration and

provide valuable feedback on security processes.

5. To obtain top management approval on IS security plan, budget, resources and

provide ongoing support for Information Security activities.

6. To ensure that, when exceptions/ deviations/ non-adherence to the IS Security are

proposed by the Application Owner, the risk assessment process is completed, and

appropriate recommendations are put up to CEO.

7. To define security violations and support investigative processes.

8. To brief Top Management on information security initiatives undertaken,

information security status across the Bank, compliance against Banks Information

Security Policies and regulatory requirements.

9. To direct Information Security Incident Response Management.

10. To oversee the development of Information Security Awareness training

programme and promote security culture in the Bank.

11. To stay informed about global best practices and latest developments in the field

of information security including technology, management practices and regulatory

requirements.

12. To represent the APCFSS in the area of information security at industry standards

Preferred candidate profile

The role holder is responsible for the overall information and cyber security strategy

and its implementation across the organization by creating the security best practices

that will account for the end-to-end lifecycle of information security operations,

including:

a. Evaluating the IT threat landscape

b. Devising policy and controls to reduce risk

c. Leading auditing and compliance initiatives for the Cyber Security Business Delivery,

driving security strategy, delivery, business and operations enabling enterprises

security and improving their overall posture.

1. Manage advanced threats and provide support to fix security breaches and data

leakage

2. Comply with security related regulatory and legal requirements

3. Establish necessary partnership with external vendors and security experts

4. Bringing to the notice of Board/IT sub-committee of the Board about the

vulnerabilities and cyber security risk, the APCFSS is exposed to.

5. As member secretary of Information Security and/or related committee(s), if any,

may ensure inter alia, current/emerging cyber threats to APCFSS and the APCFSS

preparedness in these aspects are invariably discussed in such committee(s).

6. Managing and monitoring SOC and drive cyber security related projects.

7. Maintaining and update a threat landscape for the organization on a regular basis.