Ensure company employees and vendors are adhere to Information Security policies and procedures.
Ensure that security programs comply with relevant laws, regulations and policies to minimize or eliminate risk and audit findings.
Create and manage information security and risk management awareness training programs for all employees and contractors.
Manage security incidents and events to protect corporate IT assets, including intellectual property, regulated data and the company's reputation.
Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
Develop and oversee effective disaster recovery policies and standards to align with enterprise business continuity management program goals. Coordinate the development of implementation
plans and procedures to ensure that business-critical services are recovered in the event of a security event. Provide direction, support and in-house consulting in these areas.