Head of Security CU TH

You will:

• Facilitate execution of and follow up on security strategy, policies & instructions, governance model and frameworks.
• Support the business in implementation and maintenance of ISO 27001 controls across the CU as per the MA scope and Ericsson Global ISO 27001 control framework.
• Support MOAI ISMS domain lead in driving the Information Security forum and spread ISMS awareness in the respective CU’s.
• Provide investigative support during incidents. Support responses to customer and partner requests during sales, and throughout the engagement.
• Facilitate and participate in knowledge sharing internally and in relevant industry associations. Assess best practices for applicability in the organization.
• Support in delivery of security processes in Merger & Acquisitions, Sales, Managed Services & Delivery processes.
• Stakeholder interface for any security issues in the geographical area. Drive and manage Crisis situation in the CU.
• Manage local security incidents and support investigations. Support contacts with local authorities when requested.
• Support events and VIP protection. Support performing security assessments and audits (sourcing related, regulatory solutions related and general audits such as Ericsson Blue, Corporate etc.).
• Monitor and follow up security installations/solutions in building and reconstruction projects.

The skills you bring:

• Good knowledge and experience of Business Continuity Management.
• Knowledge and experience of ISO/IEC 27001, Physical security, Privacy, Risk Management, Information-, Personnel-, Physical security, Business Continuity and Crisis Management, Knowledge in Enterprise Risk Management, Business Continuity and Crisis Management

Deliverables

• Implementation and compliance to group steering documents (Example, policies, directives, instructions, processes and controls)
• Identification of risks, threats and vulnerabilities to Ericsson people, brand and assets at CU level. Highlighting the risks, threat and vulnerabilities to CU LT in a formal forum and suggest the required mitigation actions.
• Establish strong working relations with the CU LT and relevant stakeholders and be a trusted security/risk adviser.
• Ensure adequate support and availability in implementation, Maintenance and improvement of information security controls at CU level
• Effective communication channels are established for raising security awareness at all levels within the CU