chief ICT security officer

Description

Chief ICT security officers protect company and employee information against unauthorized access. They also define the Information System security policy, manage security deployment across all Information Systems and ensure the provision of information availability.

EssentialOptional

Theoretical Knowledge

ICT network security risks ICT security standards cyber security data protection ICT security legislation internal risk management policy ethical hacking principles ICT project management ICT project management methodologies organisational resilience security engineering information confidentiality ICT process quality models attack vectors information security strategy ethics risk management decision support systems audit techniques cyber attack counter-measures assessment of risks and threats web application security threats ICT communications protocols control objectives for information and related technology ICT infrastructure cloud technologies ICT encryption cloud security and compliance ICT system user requirements ICT recovery techniques software anomalies World Wide Web Consortium standards computer forensics Internet of Things internet governance cloud monitoring and reporting computer programming

Practical Skills

engage with stakeholders ensure compliance with legal requirements develop information security strategy maintain plan for continuity of operations communicate with stakeholders ensure cross-department cooperation establish an ICT security prevention plan forecast organisational risks implement ICT security policies utilise decision support system monitor technology trends ensure information privacy comply with legal regulations lead disaster recovery exercises implement ICT risk management establish an Information Security Management System ICT safety manage IT security compliances manage system security ensure adherence to organisational ICT standards identify ICT security risks manage disaster recovery plans monitor developments in field of expertise advice on security risk management implement corporate governance educate on data confidentiality optimise choice of ICT solution implement cloud security and compliance train employees implement anti-virus software execute ICT audits coordinate technological activities identify legal requirements assess ICT knowledge manage staff conduct impact evaluation of ICT processes on business protect personal data and privacy implement a firewall manage digital identity manage keys for data protection implement a virtual private network use different communication channels apply operations for an ITIL-based environment create solutions to problems