Key Accountabilities and Responsibilities
- Support and drive key ICS Strategic and Risk Management initiatives across all business domains, as defined by objectives, and see them through to completion
- Support the development of the ICS Risk Management Strategy, as well as the evolution of the overall ICS Strategy from the focus point/driver of reducing risk to within acceptable/tolerable levels
- Support the definition, implement and maintenance of the Risk Management Framework in an ever evolving and changing risk landscape
- Create and communicate supporting artefacts regarding strategic development and risk management i.e. Documented processes, strategies, milestones, risk actions, KPIs
- Capture, develop and present relevant ICS metrics and reports for management information as required, to articulate tangible risk reduction progress
- Support the Policy Exception process from a risk perspective
- Receive, manage and progress risk and strategy related tickets/business queries
- Develop companywide (including 3rd party),
best practices and processes for Information Security risk
- Support IT and the business in documenting, sizing and planning responses to Information Security risk in adherence to documented policies, standards and procedures, providing Education & Awareness on these where relevant
- Conduct risk assessments across business and IT domains and work with product/service managers to ensure effective management of these risks
- Maintain and evolve risk management systems and data quality to ensure accurate reporting
- Research and consider policy, standard and process enhancements across the GRC space with the view of further reducing risk
- Any other activities as reasonably directed by management.
Key Interactions- This role will develop and maintain relationships with outside their own immediate team
- ICS Team
- Senior IT & Business Leadership
- Office of the General Counsel
- Corporate Security & Business Protection
- Enterprise Risk
- Produ