Lead, IT Risk Management

ROLES AND RESPONSIBILITIES

•  Design, develop, implement, and maintain simplified information security risk assessment approach and framework that enable effective oversight and regular reporting including a consistent way to identify and assess risks and communicate them with relevant stakeholders.

• Conduct enterprise-wide information security and process risk assessment exercises with the concerned stakeholders

• Work with the concerned stakeholders to determine and document the top risks and critical threats.

• Ensure that security controls, checkpoints, relevant assurance processes are embedded throughout the lifecycle of information, systems, applications, products, services.

  • Establish and maintain a highly skilled and equipped information security assessment team capable of providing sound consulting and advisory services to the business and operations.

  • Liaise and work with process owners and other stakeholders to support conduct of security risk assessments and ensure that risk mitigation strategies are identified and implemented.

  • Manage reporting, communication and documentation of the assessments conducted.

  • Perform other security related assessments and reviews covering management systems, organizational controls, technical and physical security measures to ensure that safeguards are adequate to protect the business and mitigate risks.