Prudential's purpose is to help people get the most out of life. We will deliver our purpose by creating a culture in which diversity is celebrated and inclusion assured, for our colleagues, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and in exchange, we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow and Succeed.To act as "second line of defence" to provide assurance and oversight on information and privacy risks that might pose a threat to the business. Provide expert advice and coach relevant parties from business to ensure the relevant policies/guidelines and regulatory are being adhered to.Principal Duties & Responsibilities:- Assist to provide oversight and assurance within the business that processes, tools and technologies are operating effectively to mitigate risks to information.- Establish appropriate local guidelines and procedures and ensure local policies are in place so that all local regulatory requirements relating to information security and data privacy are met.- Monitor the implementation of information security and data protection standards, policies and procedures within the organization.- Support operational functions as required to handle risks to information appropriately by providing advice and guidance on information risk issues to internal stakeholder's major projects and initiatives.- Initiates, facilitates and promotes activities to cultivate information risk and privacy awareness within the organization.- Conduct regular review, timely reporting and escalation of information risk activities to PCA Information Risk and Privacy.- Implement compliance assessment program to ensure compliance with regulatory requirements and best practices related to information systems security and data privacy.- Work closely with IT, IT Security, Internal Audit, Compliance, Legal and other stakeholders on information security and data privacy related matters.- Keeping up to date the Privacy policies and procedures including the breach management policy and to disseminate new rules/regulations on privacy to staff.- Monitor the implementation of Privacy standards, policies and procedures within the organisation.Job Requirements:- Bachelor Degree in Information Technology, Computer Science, Information Security / Information Risk.- Minimum of 2 years related working experience in Information Security / Information Risk / IT Security / Risk sector is highly encouraged.- Information Security related certifications such as CISSP, CISM, CEH, CompTIA Security + or similar certification will be added advantage.- Possess the ability to work under pressure as well as independently under mínimal supervision.
