Job Description

To manage and oversee the information security of TCHFL, inclusion its systems and data. Assure that information created, acquired or maintained by TCHFL and its authorized users, is in accordance with its intended purpose and complies with statutory and regulatory requirements regarding information access, security and privacy in order to protect TCHFL\xe2\x80\x99s information and its infrastructure from external and internal threats.

Main Accountabilities

Information Security Framework

\xc2\xb7 Develop, update and drive the policies, processes, systems, guidelines & best practices related to information security to protect TCHFL\xe2\x80\x99s sensitive information and assets.

\xc2\xb7Establish & monitor the governance structure for data storage, usage & access control.

\xc2\xb7Establish and communicate organizational cybersecurity policy.

\xc2\xb7Developing information security roadmaps, business cases and reviewing remediation plans

Risk Management

\xc2\xb7Conduct regular risk assessments to identify potential security threats and vulnerabilities and develop strategies to mitigate these risks.

\xc2\xb7Support in performing information security risk assessments for all new projects/ business initiatives and prepare risk report for stakeholders involved to ensure that those are taken into consideration during implementation.

\xc2\xb7Ensure compliance with relevant laws, regulations, and industry standards, such as the Payment Card Industry Data Security Standard (PCI DSS) and the General Data Protection Regulation (GDPR).

\xc2\xb7Develop processes and frameworks to measure information security compliance level of the organization to ensure all external and internal policies are adhered to

Incident Reporting and Response System

\xc2\xb7Develop an information security incident monitoring and reporting system to continuously monitor information security breaches, policy violations or complaints from external and internal parties.

\xc2\xb7Lead incident response efforts in the event of a security breach, and work with law enforcement and other relevant organizations to investigate and resolve the incident.

\xc2\xb7Investigate potential privacy incidents, complaints or breaches, including notifications to authorities and other resolution efforts.

\xc2\xb7Conduct internal line of duty investigations and analyse the findings of investigations and recommend incorporation of suitable changes in the action plans and policies/ systems

Team Management

\xc2\xb7Provide guidance for the development of L&D programs to enhance capabilities/ bridge identified gaps of employees in team

\xc2\xb7Develop career development and succession plans for critical positions and roles within team

\xc2\xb7Participate in selection process to identify the right talent for senior positions within the team

Acura Solution