|
KEY ACCOUNTABILITIES & ACTIVITIES
This section describes the principal outputs required from the job.
|
|
Key Accountabilities
|
Key Activities
|
|
1. Cybersecurity Strategy and Governance
|
• Lead the development and execution of cybersecurity plans, initiatives, and governance activities within the assigned scope.
• Ensure cybersecurity objectives are aligned with Elm's strategic priorities, business requirements, and regulatory expectations.
• Provide direction and guidance on cybersecurity policies, standards, procedures, and control requirements.
|
|
2. Cybersecurity Risk Management
|
• Oversee cybersecurity risk assessments for systems, services, processes, and business initiatives.
• Validate key cybersecurity risks, control gaps, threats, and vulnerabilities that may impact confidentiality, integrity, or availability.
• Drive risk treatment plans and follow up with stakeholders to ensure timely mitigation and effective risk reduction.
|
|
3. Security Controls and Compliance Oversight
|
• Oversee the design, implementation, and effectiveness of cybersecurity controls across the assigned environment.
• Ensure compliance with applicable cybersecurity regulations, internal policies, and relevant standards.
• Review compliance gaps, remediation plans, and evidence to support audit readiness and management reporting.
|
|
4. Cybersecurity Advisory and Business Enablement
|
• Provide cybersecurity advisory support to business and technical stakeholders on initiatives, projects, and services.
• Ensure cybersecurity requirements are embedded into solutions, processes, and business decisions from early stages.
• Balance business enablement with risk-based cybersecurity controls and practical implementation guidance.
|
|
5. Security Monitoring and Incident Response Oversight
|
• Oversee cybersecurity monitoring activities and ensure security events are reviewed, escalated, and handled appropriately.
• Coordinate with relevant teams during cybersecurity incidents to support investigation, containment, remediation, and reporting.
• Review incident outcomes and ensure lessons learned are translated into improvement actions.
|
|
6. Vulnerability and Threat Management
|
• Oversee vulnerability management activities, including prioritization, remediation follow-up, and risk-based treatment.
• Monitor emerging cybersecurity threats and assess their potential impact on Elm's systems, services, and operations.
• Coordinate with system owners and technical teams to ensure timely closure of critical vulnerabilities and exposure areas.
|
|
7. Stakeholder Management and Cybersecurity Awareness
|
• Build and maintain effective relationships with internal stakeholders, business owners, technology teams, and governance functions.
• Promote cybersecurity awareness and support the adoption of secure practices across the assigned scope.
• Facilitate alignment between cybersecurity requirements, business priorities, and operational delivery needs.
|
|
8. Performance Reporting and Continuous Improvement
|
• Prepare and review cybersecurity dashboards and management updates covering risks, controls, compliance, incidents, and improvement plans.
• Analyze cybersecurity performance indicators to identify trends, gaps, and maturity improvement opportunities.
• Lead continuous improvement initiatives that enhance cybersecurity resilience, governance effectiveness, and operational readiness.
|
|
9. Policies, Processes & Procedures
|
• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
|
|
10. Information Security
|
• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.
|