Description:This role will be responsible for ensuring internal systems and processes are compliant with information security standards; providing consultation and awareness of information security requirements; monitoring, managing and closing information security compliance issues. The responsibilities include identification, evaluation and interpretation of standards, regulatory, statutory and member security requirements, control deficiencies and information security risks. Duties and responsibilities:Review and revise policies in Capital A and its subsidiaries where information security is concerned. Map Capital A requirements and standards/regulatory requirements across the company’s information security framework to identify overlapping requirements and compliance efficiencies.Track enterprise compliance across multiple security frameworks and maintain up-to-date records of requirements and corresponding mitigating controls.Participate and facilitate audit and assessment activities to ensure compliance with information security requirements.Assist in identifying and analysing internal and external information security requirements in order to provide relevant and suitable standard or best practice and solutions to fulfill requirements.Assist in analysing management and technical controls to ensure specific security and compliance requirements are met through verification of documented processes, procedures and standards in order to validate maintenance of secure configurations.Collaborate on IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle.Monitor and facilitate entitlements review process to ensure compliance..Support development and reviews of security policies, processes and procedures and support service-level agreements to ensure that security controls are managed and maintained. 

Strong communication (spoken and written), interpersonal, and conflict resolution skills. Ability to establish and maintain rapport with stakeholders is highly desired.

Minimum 1 years experience in participating/conducting IT/Information Security audits or assessmentsRelevant industry certification is an advantage (ISO 27001, CISA, CISSP, CGEIT, etc)