Job Responsibilities:
Information Security & Data Governance
- Implement and maintain robust controls for information security, data management, and cybersecurity to meet audit, compliance, and corporate governance standards.
- Conduct incident investigations, risk assessments, and operational monitoring/testing of security protocols and data quality.
- Advise stakeholders on information security best practices, data management policies, and risk mitigation strategies.
Project Management & Process Improvement
- Lead end-to-end project implementation, ensuring alignment with user requirements, timelines, and objectives.
- Identify and drive system/process improvements to enhance operational efficiency and security posture.
- Provide technical guidance on system workarounds and operational procedures to address deficiencies.
Stakeholder Engagement & User Support
- Collaborate with cross-functional teams to clarify information security and data management requirements.
- Deliver clear communication and training to enhance organization-wide awareness of security protocols.
- Offer expert advice on security considerations for new projects, systems, and technologies.
Leadership & Team Development
- Mentor and coach team members to strengthen technical expertise and business acumen.
- Oversee training programs to elevate staff competency and foster a culture of security awareness.
Compliance & Risk Management
- Ensure adherence to corporate policies, regulatory standards, and industry frameworks (e.g., GDPR, ISO 27001).
- Monitor emerging threats and vulnerabilities (e.g., internet security, data loss prevention) to proactively mitigate risks.
Job Requirements:
Education & Certifications
- Bachelor’s degree in Computer Science, Information Systems, Business Statistics, Finance, or related field.
- Required: At least one professional qualification in insurance (e.g., FLMI, PMP).
- Preferred: CISSP, CISA, CISM, or equivalent cybersecurity certifications.
Experience
- 10–15 years of experience in the insurance/financial sector, with 6+ years in leadership roles focused on technology risk, information security, or IT governance.
- Proven track record in managing security tools (e.g., HSM, firewalls, intrusion prevention systems) and securing financial applications.
Technical Knowledge
- Expertise in cybersecurity frameworks, PIN/key management, application security, and vulnerability assessment.
- Familiarity with data loss prevention (DLP) systems, cloud security, and incident response protocols.
Skills & Competencies
- Strong analytical, problem-solving, and decision-making skills.
- Excellent communication, presentation, and interpersonal abilities for stakeholder engagement.
- Adaptability to evolving challenges and dynamic regulatory environments.