- Own and direct the information security and cyber risk management programs and lead strategic security planning to achieve business goals.
- Lead the development, review, and implementation of information security policies and standards, ensuring alignment with industry regulations and internal business objectives. Monitor compliance and drive the adoption of these policies across the organization. .
- Oversee the security architecture to integrate DevSecOps practices that enhance the security posture of the organization across its infrastructure and application
- Lead the design and continual evolution of the security architecture to improve the ability to identify, protect, detect, respond, and recover from threats, intrusions or other disruptions
- Cloud Security Architecture: Ensure the security of cloud-based environments, particularly with Google Cloud Services. Collaborate with cloud architecture teams to design and implement secure, scalable cloud solutions that comply with best practices for cloud security.
- Ensure the security architecture is consistent with enterprise architecture and leverages new and emerging information technology trends (e.g. artificial intelligence (AI), Internet of Things (IoT), robotic process automation (RPA), cloud, DevSecOps, micro services, digital wallets and digital currency)
- Ensure continual execution of security tests (e.g. stress, penetration, attack simulation, business continuity, IT emergency and disaster recovery) for existing and new systems and manage a Three Lines of Defense (3LoD) model to assess and tackle threats and align with enterprise risk management
- Lead the strategy and execution of DevSecOps practices to ensure security is integrated throughout the development lifecycle, from development to production.
- Oversee the implementation of secure coding practices and automated security testing in CI/CD pipelines to ensure high-quality and secure code delivery.
- Lead change and release management initiatives across the organization to ensure that all security and DevOps practices are adopted seamlessly and efficiently.
- Develop and implement a structured approach to change and release management, ensuring minimal disruption to business operations and secure transition of new technologies or processes.
- Establish and oversee a robust Software Quality Assurance (QA) process that integrates security and performance testing across the software development lifecycle.
- Lead the identification, assessment, and mitigation of IT risks across the organization, including risks associated with infrastructure, applications, data, and digital transformation initiatives.
- Develop and maintain a comprehensive IT risk management framework to identify potential vulnerabilities and threats across the organization's IT landscape.
- Oversee the creation and maintenance of the IT Business Continuity Plan, which includes conducting Business Impact Analyses (BIA) and formulating Disaster Recovery (DR) strategies.
|