-
Provide technical analysis of company
requirements necessary for the protection of all
information processed, stored or transmitted by systems;
interpret requirements;
-
Translate, implement and administer
company plans, policies and procedures necessary to
ensure compliance. Develop, communicate
and implement data and computer security policies and
procedures;
-
Respond to inquiries regarding data and
computer security, policies and procedures; Provide
technical assistance with recovery exercises and
requirements for Disaster Recovery (DR);
-
Coordinate assignment,
documentation and maintenance of computer login codes,
passwords and access profiles for software applications,
network access and telecommunications systems;
-
Review computer reports, files and
messages to identify instances of possible security
infractions and perform problem resolution of tickets;
Perform annual audits of
identifications, accesses and capabilities across all
systems;
-
Work with outsourced vendors for
identifications, rules and security setups; Member of
the Disaster Recovery Team with the Disaster Recovery
Coordinator role, has the overall responsibilities for
recovery from disaster to restoration of normal
operations ensuring all required support.
-
Maintain, test and update the Disaster
Recovery Plan, in detail. Assume overall responsibility
for recovery from disaster to restoration of normal
operations. Maintain a log and evaluate all required DR
team activities, along with start/completion dates and
times for all relevant actions.
-
Be focal point of all information and
communication to Crisis Management Leader from the
disaster identification to the closure of the overall
process.
-
Ensure all support required during
recovery and restoration activities to Assessment &
Restoration team (vendor support, user test, etc…).
-
Point of contact when a disaster is
identified or when an event could potentially require DR
resources to be solved. Prepare final recommendation to
Crisis Management Leader (role typically played
by Security Leader) to declare a disaster or not.
-
Supervise and support all activities,
ensuring that there isn’t any potential threat to
personnel safety. Participate in damages evaluation and
possible restoration options (funds, outage duration).
-
Organize move of DR Team members to the
DR Site. Provide support in acquiring all resources
needed.
-
Supervise and monitor all recovery
activities. Supervise activities and operations from DR
Site, keeping informed Crisis Management Leader (role
typically played by Security Leader) on all relevant
decision. Ensure support in provisioning of what is
required during operations.
-
Ensure support in procurement of
equipment needed (through Crisis Management Leader).
-
Supervise to all reinstatement activities
and communicate progress updates and issues to Crisis
Management Leader. Once restoration activities have
been completed, authorize testing ensuring all contact
required are present at planned time.
-
Coordinate moving back to the reinstated
(or new) production site.
-
Carry out IT security risk analysis,
vulnerabilities assessment and security incident
response.