Job Summary
Oversees IT Security governance, risk and compliance for UM Group. Ensure the organization has a strong security mindset and culture, follows and complies to required regulations, standards and leading practices. Collaborating across the divisions to educate, improve IT Security risk controls and enhancing policies for Information Systems, where needed.
Job Responsibilities :
- Develop, implement and improve long-term cybersecurity governance programs aligned with company objectives, including dashboard for reporting metrics.
- Lead IT cyber risk initiatives, ensuring all departments understand and address key risks.
- Oversee IT Security compliance with regulations, develop policies, and conduct security assessments to ensure ongoing alignment.
- Create and update cybersecurity policies to adapt to emerging threats and technologies.
- Lead training and workshops to build a strong IT security culture across the organization.
- Provide accurate and timely reports on the organization's IT security posture and improvements.
- Manage Security risks related to third-party vendors, ensuring they adhere to IT security policies.
- Stay updated on regulatory requirements and ensure the organization meets IT compliance standards.
- Regularly assess and improve security monitoring, adapting to new threats and technologies.
- Work with various departments to integrate cybersecurity measures into business processes, aligning them with overall goals.
- Sets goals to enhance UM's IT security posture and maturity.
- Identifies and manages cyber security and information risks related to governance, compliance, and cybersecurity.
- Develops and implements IT policies and security procedures in these areas.
- Ensure compliance to ISMS/ISO 27001, PCI DSS, regulatory requirements, etc.
- Leads IT Security Awareness training programs for the organization.