- Contribute in the policy creation to assist in preparing, refining, and updating information security policies, standards, guidelines, and procedures pertaining to Information Security Risk Assessment.- Provide expertise in Information Security Risk Assessment by guiding and advising various Business Units (BUs) in identifying and evaluating security risks associated with their operations.- Conduct risk assessments and recommend appropriate mitigation strategies to enhance the organization's overall security posture.- Analyze threat intelligence, internal/external Vulnerability Assessment and Penetration Testing (VAPT) results, Red/Blue/Purple teaming tests, 3rd-party Incident Assessments, and internal/external audit findings related to information/cyber security.- Monitor the progress of remediation efforts based on incident assessments and other security evaluations, providing regular status reports.- Participate in project meetings and system/product discussions to offer expert advice on security controls that should be implemented to prevent, contain, and mitigate security risks and vulnerabilities.- Conduct in-depth research and analysis of emerging information security threats and technologies to strengthen the organization's information security programs and implementation against newsecurity challenges.- Assist the CISO/Information Security Head in preparing comprehensive Management and Board Committee reports, outlining the organization's security posture, ongoing initiatives, and risk management efforts.- Proactively identify opportunities for enhancing information security practices and processes across the organization.