What You'll Do : 

• Risk identification: periodic identification of all corporate risks (i.e., strategic and business risks, financial risks, legal and compliance risks, reputational and ESG risks and operational and ICT risks)
• Risk assessment: measurement of the risks identified thanks to the proprietary risk methodology
• Risk monitoring: continuous monitoring of risks, through control through KRIs (i.e., Key Risk Indicators)
• Risk response: definition and monitoring of implementation plans for solutions aimed at mitigating the risks identified during the risk assessment phase or during the ongoing risk monitoring activities
• Risk reporting: report to the Group Risk Management Team the results of the Risk management activities (i.e., identification, assessment, monitoring and response)
• Provides training to the new trainees and providing general oversight to all the business partners, employees, alliances, etc., to ensure appropriate information security clearance.
• Provides details regarding the current security procedural and technological developments and any other related issues.
• Involved in planning and managing information if there is an occurrence of any disaster and the information or data needs to be retrieved.
• Performs regular inspections and tests to ensure complete security of the vital information.
• Involved in designing strategies and organizing the technical data to ensure that the company's goals are met. He/she performs regular analysis and assessment to ensure the mitigation of the risks that have been involved.
• Plays a crucial role to maintain the existing security infrastructure and helps in defining the future programs that will ensure better security of the company's valuable data.
• He is responsible for maintaining and overseeing the Information Security Management Systems (ISMS) to accomplish and maintain the ISO 27001 and WLA -SCS Certifications.
• Is accountable for the maintenance of the business continuity management system.

Skill & Qualifications:

• Well-spoken and written English.
• Bachelor's degree in computer science or any other relevant field.
• Advanced certification or training in information security field.
• Completion of CISSP, CISM, CISA, and ISO 27001 Certification, and any other security certification would prove to be an added advantage.