[ad_1]

The purpose of the Information Risk Manager (IRM) is to ensure (as a second line of assurance, with Internal Audit providing the Third Line of Assurance) that our client is addressing Information Risks in an effective and efficient manner. The Information Risk posture includes a wide variety of potential business impacts, such as HSSE impacts, production loss, financial and maintenance operations loss, loss of Most Confidential bidding data. Each of these Information Risks has a potential impact of $1bln+.

The IRM Function defines requirements for the assessment of Information Risks, defines the selection of mandated IT Controls, and defines and executes assessments of the design and operational effectiveness of these controls. The function organises communication campaigns to impact the behaviour of business and IT staff where it relates to Information Risks.

In addition to these preventative measures, the IRM Function includes a Cyber Resilience function to understand the cyber threat landscape and the vulnerabilities to cyberattacks in IT systems and services, to detect malicious behaviour and to respond to incidents. Given the Cyber threat landscape and its development, it is critical that the IRM Function collaborates closely with suppliers and industry peers and collaborates effectively with government agencies in key countries that our client operates in.

The role is accountable to support staff to effectively know and behave in a manner to protect information assets. The Executive Engagement and Campaign Lead ensures that the right behavior campaigns are started and managed to educate all employees, specific Client’s businesses, the Senior Executive Group and IT on security topics required to ensure staff know how to think, act and be secure in how they handle information assets.

Accountabilities:

• You are the strategic engagement lead accountable for building and driving the strategy and delivery of the Think Secure campaign, an integrated global communications program plus business specific campaigns aimed at raising employee awareness, learning and changing behaviours related to information security (100,000 staff). 
• Leads work with experts, CyberDefence team, other functional experts and the executing communications team to develop and deliver Think Secure materials and Manages (at least) two team members and other functions to deliver campaigns.
• Drive the identification, execution and continuous improvement for phishing simulation campaigns and reports. Responsible for leading an external team that produces phishing reports shared at senior levels of the company. 
• Roll-out phishing consequence and reward management globally.
• Member of an external network of security awareness professional across other companies in the Netherlands.

[ad_2]

Source link