Job Purpose:
The Head of IT Security and Technology Governance serves as the primary information security leader for the business unit, with a dotted-line reporting relationship to the Group Chief Information Security Officer (CISO). The role is responsible for driving the local IT Security function, leading technology governance initiatives, ensuring compliance with security policies and standards, and strengthening the organization's overall security posture.
Partners closely with local IT teams, Group IT Security, shared service teams, vendors, and business stakeholders to implement security programs, manage risks, and ensure that security requirements are embedded across all technology initiatives.
Key Responsibilities:
1. Information Security Leadership
- Lead and oversee Business Unit IT Security activities with the support of local IT, IT Security teams, and Group IT Security.
- Act as the primary Business Information Security Officer (BISO) for the organization.
- Provide security leadership, guidance, and governance across all business and technology functions.
- Collaborate with internal and external stakeholders to ensure alignment with enterprise security objectives
2. Security Program Management
- Define, implement, and maintain the local Business Unit IT Security Program.
- Drive continuous improvement initiatives to enhance the organization's security posture.
- Establish security objectives, policies, procedures, and standards aligned with global requirements.
- Monitor security program effectiveness and recommend enhancements as needed.
3. Security Initiatives and Governance
- Lead the design, implementation, and continuous improvement of local IT Security initiatives and projects.
- Evaluate and recommend security solutions, controls, and architectures to address business needs.
- Define security operational frameworks and governance structures.
- Coordinate the rollout and adoption of Group IT Security initiatives within the country.
- Ensure security requirements are integrated into IT projects and system development lifecycles through a security by design approach.
4. Security Metrics and Risk Management
- Develop and monitor IT Security metrics, dashboards, and risk assessments.
- Perform risk mapping and track remediation activities for identified security gaps and deficiencies.
- Manage security exceptions, deviations, and associated remediation plans.
- Support risk-based decision-making through regular reporting and analysis.
5. Security Awareness and Stakeholder Engagement
- Promote security awareness across business and IT teams.
- Educate stakeholders on information security solutions, processes, policies, and emerging risks.
- Support the development of a strong security culture throughout the organization.
6. Executive Reporting and Governance
- Partner with senior technology and security leaders, including the CIO/CTO and Group CISO.
- Provide regular updates on security program performance, compliance status, risks, and remediation activities.
- Support management and governance forums through timely reporting and recommendations.
7. Technology Governance Leadership
- Lead the Technology Governance function in developing and enhancing technology procedures, guidelines, standards, and metrics.
- Ensure compliance with enterprise policies, regulatory requirements, and industry best practices.
- Drive continuous governance improvements to support organizational objectives.
