-
Manage the implementation of IT risk management frameworks and processes;
-
Lead, plan, direct, and control the activities of the quality assurance and compliance of all IT services;
-
Lead risk assurance and review activities. Where gaps or weaknesses are identified, propose practical recommendations to enhance the management of the IT risks;
-
Research and propose to Develop and standardize new information security standards and procedures in line with MAFC’s reality (PCI-DSS, ISO 27001...);
-
Audit: Monitoring, checking, and periodically evaluating compliance with security policies and standards for IT systems;
-
Periodically communicate about security, compliance, and technology risks.

