Senior IT Security Policy and Standard Management

Responsibilities:

1. Security Governance & Strategy

· Develop, implement, and maintain the organization's Information Security Governance Framework.

· Establish cybersecurity strategies, objectives, and roadmaps aligned with business goals.

· Ensure security governance practices support the organization's digital transformation initiatives.

· Advise senior management on cybersecurity risks, emerging threats, and governance issues.

· Promote a risk-based approach to cybersecurity decision-making.

2. Cyber Risk Management

· Lead enterprise-wide cyber risk management activities.

· Identify, assess, prioritize, and monitor cybersecurity risks.

· Facilitate cyber risk reviews and risk acceptance processes.

· Develop risk mitigation strategies and track remediation activities.

· Report key cyber risks and exposure trends to executive management and risk committees.

3. Policy, Standard & Control Governance

· Develop and maintain information security policies, standards, procedures, and guidelines.

· Ensure alignment with industry standards and regulatory requirements.

· Review and update governance documents regularly to address evolving threats and business changes.

· Establish security control requirements and governance mechanisms across the organization.

4. Cyber Resilience & Governance Oversight

· Provide governance oversight for Incident Response, Business Continuity, and Disaster Recovery programs.

· Participate in cyber crisis management and executive tabletop exercises.

· Ensure lessons learned from incidents are incorporated into governance and risk management processes.

· Support the organization's cyber resilience and operational resilience objectives.