information security risk management.

 Personal Skills / Abilitieso Excellent written and verbal communication and interpersonal skills.o Solid problem solving skills.o Ability to develop adaptive, creative solutions for difficult problems. Threat Detection & Response Analyze suspicious files and emails to determine if benign or malicious and react accordingly. Execute and coordinate the collection and analysis of Cyber Threat Intelligence. Identify the root cause of cybersecurity incidents using digital forensics, network forensics, and malware analysis. Execute efforts to contain and eliminate threats. Provide cybersecurity incident tracking, reporting and lessons learned feedback. Serve as first point of contact for all cybersecurity incidents. Information Security EngineeringMaintain IT InfoSec platforms to support IT Information Security Operations.Assist in the build and maintenance of Information Security Operations Runbooks whereoperations processes and procedures are defined. Assist in the build and maintenance of Information Security Operations Orchestration,Automation and Response workflows to automate tasks wherever possible.

Prepare and maintain the Risk Register for the companyConduct a qualitative review of all documents addressed to the Risk Management Committee, and/or the CEO of the organization concerning risk management.Convenes the meetings of the Risk Management Committee (RMC).Responsible for preparing and reporting of self-assessment results to CEO of company.Responsible for the regular update and implementation of the Risk Management and Internal Control System Guideline for the Group.Central Risk Manager is authorized to request that SPVs and organization for information on the respective event-based risk situation (RMS) or process risk situation (ICS), including any initiated or necessary measures and controls, and to evaluate this information as necessary. The SPVs are obliged to provide information and evidence to the Central Risk Manager to this extent. All department employees, with the prior confirmation from the CAO, are obliged to provide information to the CRM.

Prepare and maintain the Risk Register for the companyConduct a qualitative review of all documents addressed to the Risk Management Committee, and/or the CEO of the organization concerning risk management.Convenes the meetings of the Risk Management Committee (RMC).Responsible for preparing and reporting of self-assessment results to CEO of company.Responsible for the regular update and implementation of the Risk Management and Internal Control System Guideline for the Group.Central Risk Manager is authorized to request that SPVs and organization for information on the respective event-based risk situation (RMS) or process risk situation (ICS), including any initiated or necessary measures and controls, and to evaluate this information as necessary. The SPVs are obliged to provide information and evidence to the Central Risk Manager to this extent. All department employees, with the prior confirmation from the CAO, are obliged to provide information to the CRM.