• To develop cybersecurity policies and procedures aligned with best practices and Local Regulations and standards.
• To Assess patterns of non-compliance with organizations cybersecurity policies and procedures to ensure improvements.
• To design, implement, and maintain a risk management program.
• To identify the roles and responsibilities for execution of the Risk Management Framework.
• To update the risk register based on the risk assessment.
• Perform a cybersecurity risk assessment of organizations systems and information.
• To develop and monitor the implementation of the risk treatment plan.
• Develop and calculate KRIs\KPIs to monitor the risks.
• To communicate cybersecurity risks, posture, and event / incident management reports to the stakeholders.
• Conduct Application / Asset based Risk Assessment