CISO @ Assistant General Manager, Information Security

To oversight the current and emerging technology risk, cyber risk, security and data which could potentially impact the ACSM’s risk profile.

To ensure information assets and technologies are adequately protected.

Identify and report on technology risk including security breaches, to initiates correction action and regulatory requirements.

Facilitate independent technology risk assessment which includes process reviews, third party service providers to ensure that they are performed efficiently and effectively.

Act as coordinator and point-of-contact in cyber risk management activities (i.e. cyber risk identification, prevention, detection and recovery)

Responsible for staying abreast of the latest cyber security practices, technologies, incidents and emerging threat.

Oversee incident response planning, as well as the investigation of cyber security breaches, and assists with disciplinary and legal matters associated with the breaches as necessary.

Participate in development and implementation of the appropriate and effective controls to mitigate identified threats and risks.

Assemble and identify scenario of cyber risk that the ACSM is most likely to be exposed to estimate the likelihood and impact the significant events to the organization and business objectives.

Participate in IT project and initiatives to bring pro-active risk management focus into solutions.

Provide guidance in the development of the Technology risk.

Assists in the research, development, communication, maintaining and working with the operational unit on the enforcement of IT security architecture, policies, procedures, solution and standards with the IT division.

Communicate the independent assessment results and review result to appropriate parties, ensure that issues and corrective actions have been addressed.

Conduct the ACSM awareness initiatives in relation to cyber risk and technology risk; and

Carry out any ad-hoc assignments assigned by the CRO/ Management/ BOARD from time to time.