AddressManager IT Governance & Risk Role
- The Manager, Information Security (CISO) is responsible for establishing and maintaining a company wide information security management program to ensure that information assets are adequately protected.
- This position is responsible for identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements.
- The CISO position requires sound knowledge of business management and a working knowledge of information security technologies.
- The CISO will proactively work with business units to implement practices that meet defined policies and standards for information security.
- This position is also responsible for the overall enterprise information security architecture, tools selection, processes that support the information security functions.
- He or she will also oversee a variety of IT-related risk management activities.
- The CISO serves as the process owner of all assurance activities related to the availability, integrity and confidentiality of customer, business partner, employee and business information in compliance with the organization& information security policies.
- A key element of the CISO role is working with executive management to determine acceptable levels of risk for the organization.
- The CISO must be highly knowledgeable about the business environment and ensure that information systems are maintained in a fully functional, secure mode.
