Responsibilities
- Take ownership of information security policies, standards, and control frameworks, ensuring continuous improvement and ongoing relevance.
- Map security controls to regulatory mandates and industry standards to maintain comprehensive governance alignment.
- Conduct risk assessments and develop practical risk treatment strategies based on business impact and urgency.
- Collaborate with first and second lines of defense to prepare for audits and meet compliance requirements.
- Deliver consistent assurance on control effectiveness by identifying weaknesses and guiding corrective actions.
- Work jointly with Enterprise Architecture and Cyber teams to integrate security into system design and implementation.
- Monitor and manage control exceptions, risk acceptances, and remediation efforts until resolution.
- Support organizational separation initiatives and ensure Day-1 control readiness with proper documentation and evidence.
- Act independently, balance multiple priorities, and confidently engage stakeholders to influence risk-informed decisions.
