• Lead and manage IT Security operations and its security technologies at MARC.
• Develop and implement IT security procedures for MARC that includes a well-defined and documented plan of action to mitigate security incident occurrence.
• Ensure information security strategies, plans, and action plans are implemented to meet the IT Group's requirements.
• Establish and continuously gather IT security reporting metrics and prepare IT security reports.
• Ensure IT risk and policies are operated within the IT security framework and comply with internal and external regulations and policy compliance.
• Monitor the remediation status of all identified IT Security issues and ensure the timely escalation of the high-risk threat to Management.
• Ensure remedial actions are attended to if there is anything that needs improving or quickly fixed.
• Propose continuous improvement of IT security controls and processes to ensure the quality and relevance of information security practices are meeting the enterprise and technology risks.
• Help implement security controls on IT systems maintained/managed by other teams/departments.
• Perform compliance checks across enterprise information assets and regularly audit the policies and controls that are in place.
• Ensure cyber security stays on the organisational radar.
• Provide guidance to team members on security aspects of the IT systems and applications operated/managed by them.
• Perform risk assessment on IT infrastructure including servers, applications, and network security devices on a periodic basis.
• Manage and drive IT security IT-related projects.
• Provide independent views to Management on third-party assessments, where necessary.