Information Security and IT Control Officer Assistant Compliance Officer

Location in 5 years

Company Type : 1994

Experience of BA/BSc/HND , MBA/MSc/MA

Criteria in Full Time

Application Deadline Posted: Oct 29, 2018

Nov 16, 2018

Job Summary

To protect the confidentiality and integrity of clients, employees, and business information in compliance with organization policies/standards and business objectives of ARM pension.

Principal Duties and Responsibilities

Maintain a risk management framework.
Perform risk assessments on resources and projects to be protected
Perform vulnerability assessments to evaluate the effectiveness of existing controls
Ensure a framework for information security governance and IT control
Update and advise top management on security direction and issues
Provide technical security expertise to IT to ensure that the requisite level of security is implemented in all information assets
Maintain and review information security policies that support business goals and objectives, and are consistent with applicable laws and regulations
Maintain standards, procedures and guidelines that support information security policies, and ensure business processes and IT infrastructure activities address information security risks
Maintain documentation of all information systems security and change management processes
Maintain and review information security policies that support business goals and objectives, and are consistent with applicable laws and regulations
Perform system audit checks including pre-implementation and post-implementation of projects
Monitor and review operations logs and event console activity to identify potential security related events, and investigate all anomalies
Lead and facilitate internal training and awareness of IT security policies, controls and best practices, as well as the impact of non-adherence in order to contribute to the implementation of IT governance
Lead activities relating to contingency planning, business continuity management and IT disaster recovery in conjunction with relevant functions and third parties
Review response and recovery plans that include organizing, training and equipping the teams
Periodically test the response and recovery plans, where appropriate
Ensure the execution of response and recovery plans, as required
Manage post-event reviews to identify causes and corrective actions.