- Provide leadership within the information security sphere through development of appropriate cyber security strategies and action plans
- Obtain executive support and formulate information security goals and establish policies, standards and procedures in line with organization’s objectives
- Provide security governance, enforcing cyber security risk assessment and risk acceptance from stake holders
- Ensure cyber security compliance to organization’s policies and standards
- Review, endorse, develop risk management and mitigation plans
- Advise the appropriate cyber security solutions and technologies to be deployed
- Develop security awareness programmes and defined processes for Threat and Incident Management
- Plan, design and conduct security incident response workshops and exercises (table-top exercises, simulation and drills)
- Advise and ensure secure ICT development life cycle, security controls implementation and asset management
- Serve as a focal point of contact for the information Security matters within the organization and with customers
- Identify security risks early on and ensure they are addressed before they become actual problems
- Setup, monitor, correlate and investigate security alerts to detect and resolve incidents
- Work closely with the rest of the Engineering team to assess security aspects of the platform and systems prior to production
- Keep up to date with trends and innovation in security and best practices
- Define relevant KPI and metrics to assess and track the security events on the platform and provide reporting
