Development, implementation and maintenance of a company wide information security awareness program. This includes – • The creation and delivery of an annual security training module to all employees• The on-going provision of security awareness communication and materials utilising a variety of media • The delivery of a social engineering awareness campaign. The objective of the program is to create and foster a culture within a global business where all employees are security aware, mindful of the value of the information that they process and are aware of their individual and collective responsibilities to keep data secureManaging and responding to external customer assurance requests/ questionnaires and associated external audits/assessmentsManage the Information Risk program for Business Technology Services within the company. This involves – • Mapping processes to establish where information flows and the applications/ computer systems involved.• Production of detailed risk assessments for the applications used by the business to understand the impact of a security incident and the likelihood of such an incident occurring.• Identifying appropriate treatments for any identified risks and working with the business to follow any remediation activity through to completion