Job Description:

• Develop and maintain a cybersecurity strategy that aligns to the organization's business strategy.
• Effectively communicate financial aspects of cybersecurity related activities to senior management.
• Work with stakeholders to develop cybersecurity policies and associated documentation in alignment with the organization's cybersecurity strategy.
• Ensure that cybersecurity requirements for IT are aligned with the organization’s cybersecurity strategy.
• Develop and customize cyber threat landscapes.
• Promote and demonstrate the value of cybersecurity to stakeholders within an organization.
• Review the effectiveness of the organization's cybersecurity controls against its strategic goals.
• Advocate cybersecurity related topics with senior management, to ensure the organization's strategic goals include cybersecurity.
• Ensure that organizational cybersecurity strategy is effectively addressed by cybersecurity policies and related documents.
• Brief senior management on cybersecurity controls required to protect the organization.
• Ensure that protection and detection capabilities are aligned with the organization's cybersecurity strategy, policies and other related documentation
• Periodically review cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.
• Obtain resources to develop and implement effective processes to meet strategic cybersecurity goals
• Ensure that cybersecurity architecture design is aligned with the organization's cybersecurity strategy
• Identify alternative cybersecurity strategies to address organizational security objective
• Review the effectiveness of the organization's cybersecurity controls against its strategic goals
• Advise on security requirements to be included in RFP process, project and change management processes
• Ensure that acquired or developed systems and architectures are consistent with organization's cybersecurity architecture guidelines.
• Develop and address security architecture and systems security engineering requirements throughout the acquisition life cycle.