Role Summary

To provide a coordinated and cost-effective security risk management service to ensure that all employees, assets, data, and business operations within trade are effectively protected. This must be achieved through identifying potential security threats, developing policies and procedures, and implementing measures to prevent and respond to security incidents.

Key Responsibilities

• Conduct comprehensive risk assessments to identify potential threats to the organization’s operations, assets, and information.
• Develop and implement risk management strategies and policies to mitigate identified risks.
• Monitor and review risk management activities and make necessary adjustments.
• Develop and enforce security programs, policies, procedures, and protocols to safeguard the organization’s assets.
• Ensure compliance with relevant legal and regulatory requirements.
• Lead investigations into security, criminal, fraud incidents, breaches; coordinate with law enforcement agencies as necessary.
• Prepare detailed reports on incidents; provide recommendations to prevent future occurrences.
• Develop/deliver security awareness programs/training for employees promoting a culture of security consciousness.
• Conduct regular drills/exercises ensuring preparedness for various security scenarios.
• Oversee implementation/maintenance of physical security measures (access control systems, surveillance cameras).
• Conduct regular audits/inspections of facilities ensuring compliance with standards.
• Collaborate with IT ensuring robust cybersecurity measures against cyber threats.
• Evaluate/manage risks associated with vendors/third-party service providers; assess their performance/compliance with organizational standards.
• Develop/manage the security budget ensuring efficient resource allocation.
• Oversee procurement/maintenance of security-related equipment/technology.
• Prepare timely/accurate weekly/monthly reports on security matters including incidents/risk assessments/responses.

Additional Responsibilities

• Ensure personnel/contractors vetted/vetting records maintained
• Assess/investigate criminal incidents/recommend preventative measures minimizing future occurrences
• Liaise government agencies/bodies optimizing information gathering pool
• Propose cost-effective measures mitigating risks
• Generate weekly/monthly reports on various aspects of the role including but not limited to: developing Security Programs/plans; conducting Risk Assessments;managing service provider contracts/performance; producing timely accurate detailed concise written/verbal reports; conducting threat/vulnerability/risk assessments/reviews/security best practices mitigating risks effectively
• This role profile outlines essential functions/responsibilities required for successful execution/delivery in this position. It is not exhaustive list duties may change over time reflecting evolving nature role/company needs

Qualifications

Education Bachelor’s degree in Security Management, Risk Management, Business Administration or related field.

Experience Minimum 7 years in risk/security management within disciplined forces/private sector or related field.

Certifications

• Professional certifications such as CISSP (Certified Information Systems Security Professional), CRM (Certified Risk Manager), CPP (Certified Protection Professional) highly desirable.

Skills & Competencies

• Information Sourcing: Ability to proactively seek out/exploit relevant sources of information.
• Communication: Excellent interpersonal/written/verbal communication skills; ability to produce timely/accurate/concisely written/verbal reports.
• Critical Thinking: Excellent critical thinking analysis of threats/security risks/operational threat actors; confidence viewing problems from different perspectives/challenging assumptions/proposing new approaches with rhetorical
• competency.
• Cross-functional Liaison: Ability liaising cross-functionally with managers at all levels/external stakeholders (corporates/law enforcement officials/lawyers/service providers).
• Discretion: Discreet handling sensitive information on need-to-known basis/sharing appropriately maintaining highest integrity.