About this role
Job Description The Security Lead manages global threat and cyber risk assessments related to their scope/unit, defines cybersecurity plan and ensures compliance to Group Cybersecurity Policies. The unit’s cybersecurity plan is managed based on the NIST Framework structure (Identify, Protect, Detect, Response and Recover) and ISO 27001:2013 standard.​ The Security Lead is also the escalation point for delivery and staff-based security incidents. Country CISOs own the relationship with country security agencies.​ The Security Lead collaborates with Unit's / Country / Region DPO.​ ​The Security Lead is in charge of: 1- deploying governance and policy framework aligned with local legislation, 2- monitoring risks and threats to take preventative actions (performing risk assessment for internal applications/digital services and annual threat assessments), 3- organizing and managing communication/awareness/education, 4- controlling compliance to Baseline Policy, 5- conduct and support security assessments and gap analysis, 6- monitoring exceptions and remediation plans, 7- leading the ISO 27001 certification plan, 8- managing the Cybersecurity audits requested by customers and monitor that engagements define appropriate remediation actions, 9- supporting projects and procurement team to assess cyber risks for third-parties, 10- identifying, controlling and reporting security incidents, leading remediation activities and representing the organization during the crisis communication process, 11- defining and monitoring Cybersecurity KRI and KPI for the unit,​ The Security Lead manages the unit’s cybersecurity resources and budget. Job Description - Grade Specific