Focuses on designing and reviewing business-driven information technology solutions and business processes to meet cybersecurity and regulatory requirements related to function, protection, assurance, risk management, and compliance.
Aimed at maintaining the highest levels of compliance posture.
Maintains audit readiness at all times by performing reviews and tests.
Reviews changing requirements; identifies new risks, threats, vulnerabilities, potential anomalous flows, and interactions.
Defines the security processes for assurance, management, and compliance.
Ensures that security subsystems, and architectures for security in networks, infrastructure, middleware, applications, and systems & service management systems meet the business' needs.
Utilizes the vulnerability management processes of identifying, evaluating, and prioritizing vulnerabilities in computer systems, business processes, networks, and applications, and taking steps to remediate or mitigate risks.