Keys and Responsibilities

• Set the vision and strategic direction for the information Security and Risk & Compliance program and align it to industry best practice standards.
• Conduct a thorough evaluation of Tasdeeq’s security policy and process, identify gaps, and set priorities to create and execute a security program.
• Lead compliance activities including external audits, regulatory compliance projects, and overall information security reviews.
• Supervise and implement governance of security policies and security controls.
• Plan for and manage/implement cyber security threat and incident response plans while minimizing the effect on the business.
• Design and implement information security, protection and management framework, guidelines, and best practices for the organisation.
• Monitor their organization’s networks for security breaches and investigate and report a violation when one occurs.
• Install and use software, such as firewalls and data encryption programs, to protect sensitive information.
• Prepare reports that document security breaches and the extent of the damage caused by the breaches.
• Conduct continuous assessment of IT security practices and systems and identify areas for improvement.
• Work with System Owners to ensure that the management and execution of all systems are operating in compliance to security requirements.
• Keep abreast of the latest industry cybersecurity practices and technology as well as emerging threats and vulnerabilities, to enhance the cybersecurity posture.
• Promote and facilitate enterprise-wide Information security awareness culture, including related staff training