Supervise, implement & monitor Sumisho’s access controls and strategic information security programs that conform to both local, regulatory, and international standards and/or security best practices.
Develop / enhance Sumisho’s infrastructure and data protection program by ensuring organizational compliance with regulations and requirements.
Conducts risk assessments in coordination with ISD, stakeholders, and authorized 3rd parties to identify critical assets, determine risk exposures and recommended solutions to mitigate the risks, and prepare high-level analyses for management.
Conduct continuous assessment of information security practices to identify areas for improvement.
Review input, assist, or lead remediation activities of detected information security vulnerabilities and cyber security incidents.
Spearhead various change projects in line with Sumisho’s information security and data protection strategies.