·        Develop anenterprise information security program

·        Design a critical response process for cyber security incidents

·        Identify, report and control incidents

·        Manage and train security staff

·        Continuously monitor threats

·        Ensure that disaster recovery and business continuity plans are in place and tested

·        Approve and administer identity access policies

·        Maintain a current understanding of the IT threat landscape for the industry

·        Ensure Bank compliance with the changing laws and applicable regulations

·        Schedule periodic security tests, including internal and external penetration testing and phishing

·        Schedule table-top exercises for Crisis Team and senior management

·        Review and approve security policies, procedures and controls

 
• Ensure that they are kept current and are communicated to  staff/consultants
 
• Ensure staff/vendor compliance with the Bank’s security policies  and procedures

·        Manage, employees,contractors and vendors involved in IT security

·        Provide training and mentoring to security team members and Bank staff

·        Brief the executive team on status and risks, overall strategy and necessary budget

·        Communicate bestpractices and risks to the Bank

·        Perform a risk assessment of the Bank’s vulnerabilities in the cybersecurity landscape and develop the Bank’s risk appetite for information Security

·        Develop key risk indicators and dashboard metrics reporting to both the management team and the Board of Directors.