Kyle H

The key objective of this role is the implementation and management of the LumiraDx information security programme. The responsibilities include championship of the information security management system (ISMS), reviewing and updating the ISMS framework against the corporate standard, participating in the internal audit programme, monitoring the effectiveness of the ISMS, reporting KPIs and understanding regulatory environment for information security and data protection. • Work to implement, evaluate and improve the Information Security Management System • Maintain expert knowledge of regulatory, legislative and privacy environment • Maintain expert knowledge of evolving threat landscape and vulnerability management • Monitor and report on the effectiveness of the ISMS to local management and the CISO • Analyse, evaluate and produce KPIs, measures of effectiveness and other metrics relating to the ISMS. • Reporting of, and assisting, the Corporate IS Team to process Data Subject Access Requests. • Perform training, competency reviews and induction training for the ISMS. • Participate in internal ISMS audit programme • Identify non-conformances, create, implement and review corrective and preventative action plans • Oversee the production and testing of IS aspects of business continuity plans • Deputise for the CISO and DPO as required • Oversee the production of risk management plans • Oversee the production of Data Privacy Impact Assessments Information Security Operations • Member of Cyber Emergency Response Team (CERT) • Responsible for compliance relating to the reporting and first line remediation of security events • Monitor cyber security tools for evidence of events and incidents • Establish and continually improve cyber emergency ‘play books’ with wider IS team • Participate in cyber emergency response rehearsal exercises