Information Security Officer

With functional reporting locally, to Prague Branch Senior ISO, the ISO will be responsible for co-managing the Information Security topics in Prague and in non-domestic European branches where no local ISO is in place. Furthermore, the ISO will support the CISO of London branch in regards to IS relevant processes.

The ISO will primarily be responsible for the delivery of appropriate cyber resilience measures to Prague branch and the CE branch network. Furthermore, he will act as the Data Protection Officer or support the DPO.

In addition to that he will be the Business Contingency Manager (BCM) or support the BCM onsite in Prague branch

Delivery and support of Cyber ​​Security

Ensure that all relevant external threats intelligence is gathered, acted upon and reported as required, and that Commerzbank Prague plays an active role in the CZ cyber resilience community in line with regulatory expectations Design and deliver cyber contingency planning, incident response and resilience testing procedures across the branch, from executive levels to individual business functions. This must meet EU/CZ regulatory expectations and local business risk requirements. Cooperation on development methodologies to encompass cyber risk within existing operational risk frameworks, and align risks to the local business risk appetite

Management of information security functions

Ensure that internal information security policies and processes are delivered, supervising and developing junior staff delivering those services Steering of Information Security management as 1st line of defense function for Prague branch and associated branches Participation in IS policy management to adopt HO/group wide regulations to regional or local requirements

Cooperation with data protection officer personal union if there is no separate DPO in place

Business Continuity Officer

Source link