Senior Executive, Info Security

• Responsible for the Technology Risk Management function for ACSM in managing technology risk and enhancing technology resilience.
• To oversight the current and emerging technology risk, cyber risk and security which could potentially impact the ACSM’s risk profile.
• To ensure information assets and technologies are adequately protected.
• Identify and report on technology risk including security breaches, to initiates correction action and regulatory requirements.
• Facilitate independent technology risk assessment which has been assigned by CISO.
• Act as coordinator and point-of-contact in cyber risk management activities (i.e. cyber risk identification, prevention, detection and recovery)
• Responsible for staying abreast of the latest cyber security practices, technologies, incidents and emerging threat.
• Oversee incident response planning, as well as the investigation of cyber security breaches, and assists with disciplinary and legal matters associated with the breaches as necessary.
• Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks.
• Create and maintain and IT risk register to ensure that all identified Technology risk factors are accounted for.
• Participate in IT project and initiatives to bring pro-active risk management focus into solutions.
• Assists in the research, development, communication, maintaining and working with the operational unit on the enforcement of IT security architecture, policies, procedures, solution and standards with the IT division.
• Conduct the ACSM awareness initiatives in relation to cyber risk and technology risk.

; JOB REQUIREMENTS:

• Minimum degree in computer science or equivalent technical academic.
• Be appropriate certified in security domain.
• Have a minimum of three years of experience in IT Risk management and information Technology.