Chief Information Security Risk Officer

About the job
Responsibilities Will Include To

Manage the identification, interpretation and recording of key market regulations with impact to the ICS Policy across 60 countries into the Group Obligation register. The role holder will be the Group process owner delegate for the ICS obligation register process.
Coordinate impact assessment for laws and regulations across first line and second line stakeholders for Group Compliance oversight.
Plan to adhere book of work comprising of industry standards and Regulatory Obligations and perform regulatory gap analysis
Work with the team that ensures the ICS Framework is appropriately aligned to the legal and regulatory environment as required in the Group ICS Risk Type Framework. Provide detailed gap analysis against ICS Framework (ICS Risk Type Framework, ICS Policies and Standards) and metrics of potential changes in the Group ICS Policy.
Ensure that key Industry standards are incorporated and aligned to the ICS Policy Framework [i.e., NIST 800, ISO27001, FIPS-140-2, PCI-DSS, SWIFT] and promptly impact assess any changes.
As a delegate, coordinate large-scale regulatory change with the Central Compliance Regulatory Change Team.
Conduct regulatory attestations and provide high quality compliance responses on ICS Policy effectiveness prior to regulatory submissions from CISRO Policy Team.
Understand to a good level of knowledge the ICS risk business alignment, risk framework, risk management process, compliance e.g., risk definition, risk tolerance, reporting metric, set up risk controls, risk monitoring, risk mitigation plan, etc.
Innovate solutions to bring efficiency to the ICS regulatory gap analysis and maintenance of the mapping to Group ICS Standards.