Job descriptionConduct cyber risk assessment in support of technology initiatives to help identify IT related risk and determine appropriate controls to mitigate risks.Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.Review and development of security framework, information security policies, processes / procedures, and guidelines on an ongoing basis.Establish risk assessment, compliance enforcement activities with these policies / procedures through ongoing security / compliance reviews, not limited to log analysis and security assessment of customer ICT systems.Conduct security risk management exercise, conduct table-top exercises, conduct vulnerability assessment, coordinate penetration tests activities, conduct information security awareness training for Line of Business Representatives.Support internal projects in the matters of security risk assessment and compliance enforcement work.