1. develop and implement viable information security strategies, guidance processes, guidelines and policies for the organization's effective resources designed to ensure the stable operation of the enterprise's data and system security;2. developing and implementing an effective data security management model to ensure the security of the enterprise's data and systems;3. keeping an eye on information security, technology and legal changes to ensure that the organization's information security strategy and approach remains cutting edge;4. maintaining liaison with other parts of the enterprise to ensure that information security policies are effectively implemented;5. auditing and overseeing the technical testing process for the organization to ensure that threats to systems can be identified and corrected in a timely manner;6. providing security consulting to the organization to help it develop an effective and sound information security strategy;7. assisting the organization in conducting internal audits for data loss, data breaches and other risks;8. ensuring the organization's compliance with national and industry security standards;9. monitoring the organization's information guard system to ensure compliance with information security policies and security procedures;10. manage and train the information security team.