Source description
About the role
- 10+ yrs. experience IT & IT Security - At least 6 yrs. of relevant experience - Certified in ISO 27001: 2013 - Enterprise IT Governance including knowledge of IT risk management and controls. - Strong power point presentation creation and design. - Strong problem-solving skills; comfortable tackling complex problems and breaking these down into manageable pieces - Superior communication, facilitation, and consensus-building skills. Job Description : - Prepare security dashboards with KPIs, security metrics, balance scorecards for CISO presentations. - Function as the single point of IT contact for key elements such as enterprise IT policy governance, IT svtrategy, IT internal and external audits, and IT risk acceptance. - Develop and maintain policies, standards, and guidelines to ensure that a consistent framework such as ISO, NIST, etc is applied across the organization. - Monitor IT regulatory communication and introduce required changes existing policies, procedure & processes. - Prepare responses for regulatory enquires/reporting. - Develop and implement processes to assess and/or monitor the effectiveness of IT procedures to ensure adherence to standards and policies as appropriate. - Create and share reports with IT management, identifying IT process bottlenecks and suggesting options and recommendations. - Review and enhance the current process designs and discuss recommendations with teams. - Support in designing an IT operating model to consider outsourcing and insourcing models w.r.t Third Party Risk Assessment. - Plan and manage the execution of IT procurement, disaster recovery drills and IT SLAs and services continuity, and frameworks implementation and certification processes, such as ITSM, Uptime, and ISO. - Ensure visibility, escalation, and management of IT risks inherent in the delivery of technology services. - Maintain and monitor key performance and key risk indicators and escalate breaches in triggers or limits. - Report on risks and apply recommendations for corrective and preventative action, whilst identifying opportunities to reduce risks. - Governance of the operational estate, ensuring appropriate change controls, IT Service Management processes and security controls are followed. - Responsible for procedure governance and oversight. - Execute and mature the IT Governance program in line with heightened standards and mandates. - Through analysis, advise on performance against established risk tolerance and performance objectives. - Drive Security awareness programs and initiatives.
More at Central Depository Services