Defines, implements, and executes an enterprise-wide security strategy that aligns with business goals and regulatory requirements.
Oversees the development and management of risk management and compliance programmes to enable proactive identification, assessment, and mitigation of risks to the business.
Accountable for monitoring the effectiveness of security controls that safeguard the security of the organisation’s information assets, systems, data, and technologies;
Develop, maintain and enforcement of Information Security policies and standards thar are aligned to the organisation’s regulatory obligations, strategic goals and security risk objectives.
Leads security incident response efforts, ensuring timely and effective resolution of security incidents and breaches.
Defines security architecture principles and guardrails to ensure the secure design, implementation, and management of IT services.
Defines and executes information security assessments and action plan responses (e.g., disaster recovery strategies), to be communicated to Business C-Suite and IT Leadership.
Leads the organisation’s Information Security awareness processes.
Acts as a senior advisor to the executive team on information security, risk, and compliance-related topics.
Ensures the effective management of information security, risk, and compliance talent, including maintaining a clear structure to attract, develop, and retain the best talent in this area.
Lead business continuity planning efforts to ensure resilience and operational continuity in the face of business disruptions.