Policy and Strategy Lead

• Policy Development & Documentation

1.1. Draft, review, and maintain comprehensive information and Cyber security policies. Develop/review procedures to ensure they are aligned with the policy.

2.2. Ensure policies are aligned and adhered with industry standards (e.g., ISO 27001, NIST, GDPR)

• Stakeholder Engagement

1.Collaborate with IT, legal, compliance, and business units to gather requirements and feedback. The policies have to be framed keeping in mind the context of the organization, hence experience of handling information security policies in a large organization with diverse business areas would be a added advantage.

2.Facilitate policy approval and endorsement from leadership.

• Regulatory & Standards Compliance

1. Ensure policies meet legal, regulatory, and contractual obligations.

2. Monitor changes in regulations and update policies and compliance check sheets

• Policy Communication & Training

1. Support awareness campaigns and training programs to promote policy understanding.

2. Ensure employees and contractors are informed of their responsibilities and compliance