Define and implement information security and cybersecurity strategy
Establish security policies, standards, procedures and governance frameworks
Develop and maintain the company’s Information Security Management System (ISMS)
Lead cybersecurity risk assessments and maintain the information security risk register
Establish security controls for e-wallet, mobile application, APIs, infrastructure and internal systems
Define identity and access management, privileged access and authentication controls
Oversee vulnerability management, penetration testing and security assessments
Establish Security Incident Response procedures and coordinate cybersecurity incident management
Work closely with the IT Manager and engineering teams to embed security into infrastructure and software development
Review third-party technology providers and vendors from an information security perspective
Establish security monitoring, logging and escalation procedures
Support business continuity and disaster recovery planning from a cybersecurity perspective
Coordinate security audits and remediation activities
Ensure appropriate protection of customer, transaction and company data
Promote cybersecurity awareness and training across the organization
Report cybersecurity risks, incidents and security KPIs to senior management

Chief Information Security Officer (CISO)