Lead Data Security and Incident & Crisis Management globally: define strategy, policies, controls and authentication architectures; govern encryption, DLP, RBAC/ABAC and Zero Trust; lead incident response, crisis coordination, playbooks, exercises, KPIs, and cross‑functional remediation; embed security requirements across cloud, infrastructure, applications, endpoints and IAM.

Serve as technical authority for server and end-user device security and lead security and resilience testing lifecycle. Define and improve ICT controls, collaborate with IT and security teams to identify and remediate defects, ensure compliance with ISO 27001/NIST/CIS, manage external testing providers, deliver testing reports, and support incident response and security monitoring.