Ciso
Current- As the CISO of the bank, my responsibility is securing the bank's information assets and systems and acting as an internal infosec consultant, providing guidance on security matters to various business units. My duties.
- Developing and maintaining information security policies, procedures, and guidelines that align with industry best practices and regulatory requirements.
- Establishing and executing a security risk management program by identifying potential risks, threats, and vulnerabilities to the bank's information assets and systems and creating strategies to mitigate them.
- Defining the controls required to secure information assets based on their asset value and classification levels. Establishing oversight of the security infrastructure, evaluate, maintain, and monitor security systems.
- Executing compliance testing and security assessment programs to ensure that the bank's security controls are effective and compliant with internal security policies, regulatory requirements, and industry best practices.
- Developing and executing security awareness programs to educate bank employees on security best practices and promote a security-conscious culture.