Manager/Senior Manager

Job highlights

• Certified in ISO 27001: 2013

• experience IT & IT Security

• of relevant experience

• 10+ yrs. experience IT & IT Security

• At least 6 yrs. of relevant experience

• Certified in ISO 27001: 2013

• Enterprise IT Governance including knowledge of IT risk management and controls.

• Strong power point presentation creation and design.

• Strong problem-solving skills; comfortable tackling complex problems and breaking these down into manageable pieces

• Superior communication, facilitation, and consensus-building skills.
  Job Description :

• Prepare security dashboards with KPIs, security metrics, balance scorecards for CISO presentations.

• Function as the single point of IT contact for key elements such as enterprise IT policy governance, IT svtrategy, IT internal and external audits, and IT risk acceptance.

• Develop and maintain policies, standards, and guidelines to ensure that a consistent framework such as ISO, NIST, etc is applied across the organization.

• Monitor IT regulatory communication and introduce required changes existing policies, procedure & processes.

• Prepare responses for regulatory enquires/reporting.

• Develop and implement processes to assess and/or monitor the effectiveness of IT procedures to ensure adherence to standards and policies as appropriate.

• Create and share reports with IT management, identifying IT process bottlenecks and suggesting options and recommendations.

• Review and enhance the current process designs and discuss recommendations with teams.

• Support in designing an IT operating model to consider outsourcing and insourcing models w.r.t Third Party Risk Assessment.

• Plan and manage the execution of IT procurement, disaster recovery drills and IT SLAs and services continuity, and frameworks implementation and certification processes, such as ITSM, Uptime, and ISO.

• Ensure visibility, escalation, and management of IT risks inherent in the delivery of technology services.

• Maintain and monitor key performance and key risk indicators and escalate breaches in triggers or limits.

• Report on risks and apply recommendations for corrective and preventative action, whilst identifying opportunities to reduce risks.

• Governance of the operational estate, ensuring appropriate change controls, IT Service Management processes and security controls are followed.

• Responsible for procedure governance and oversight.

• Execute and mature the IT Governance program in line with heightened standards and mandates.

• Through analysis, advise on performance against established risk tolerance and performance objectives.

• Drive Security awareness programs and initiatives.