Information Security Executive (IT Cybersecurity)

Information Security Executive (IT Cybersecurity)

i. Develop and maintain the Technology Risk Management Framework TRMF and Cyber Resilience Framework CRF via the following :

• Assist to develop risk mitigation strategies and formulate enhancements to the TRMF and CRF to maintain a framework that remains relevant in identifying and mitigating significant risks in the achievement of business objectives.
• Assess and regularly analyze IT risks, by evaluating the impact and likelihood of the identified IT risks and prioritise them via maintenance of IT risk registers.
• Develop and enforce disaster recovery and business continuity plans to address potential cybersecurity incidents.

ii. Perform analysis and risk assessment of proposed new products / new IT vendors to ensure new initiatives / vendor appointments commence in a manner that minimizes risk to the organization.

iii. Conduct assessment on the Company’s compliance with relevant regulatory requirements and policies.

iv. Collaborate with cross-functional teams to integrate security measures into all aspects of the organization’s infrastructure, and ensure compliance with industry regulations and internal policies.

v. Enforce risk evaluations of third-party IT outsourcing service providers (OSPs) and ensure appropriate due diligence is performed to identify, mitigate, and maintain ongoing awareness of risks to the Company resulting from IT OSPs.

vi. Provide guidance on the secure design, development, and deployment of new systems and applications.

Security Awareness

Incident Response and Crisis Management

Requirements

#J-18808-Ljbffr