JOB DESCRIPTION

Job summary • Lead planning, development, maintenance, and improvement of the Information Security Management System. • Conduct Information Systems audits to assess the effectiveness of security controls and communicate findings to senior management for action. • Support the review and assess information security policies, standards, guidelines and procedures. • Initiate, coordinate and supervise security awareness programs, security reviews and audits. • Conduct Information risk management, incident management and business continuity management. Key responsibilities Information Security Policies & Procedures • Lead the maintenance and improvement of Information Security Policies, Standards, Guidelines, Procedures, depending on the maturity level of Information Security program. Information Security Awareness • Coordinate and supervise security awareness, training and education programs for end-users Spread Information Security Awareness. Information System Audit • Coordinate internal and external audits and assessments of the effectiveness of security controls (deployed for managing Physical Access, Access Control, Network & Perimeter, Application Development, Operating Systems, Malicious Code, Legal & Technical Compliance and Change Management). IT Risk Management • Conduct periodic Information Security risk assessment, updating Information Asset Profile, identifying vulnerabilities and proposing treatments. Security Incident Management • Handle Information Security incidents. Information Security • Maintain information security related to the SC, throughout the period of employment. • Report or act on any reported potential or actual risks or security incidents as soon as possible. Documentation / Process Ownership • Take ownership, maintain & update documented processes or documentation related to his job function. In the event where processes or documentation are shared, be responsible to inform the owner of any document about required changes or improvements. Other • Perform any other duties assigned by the supervisor directly related or relevant to the job • Ensure the assigned responsibilities are delivered:  to a high standard of quality and timeliness  in full compliance with the SC Quality Policy and the Safety and Security rules and requirements  in line with any standards and objectives designated in the Employee Performance Management system