Global Ba Is Security and Infrastructure

**Global BA IS Security and Infrastructure**:
**Take your next career step at ABB with a global team that is energizing the transformation of society and industry to achieve a more productive, sustainable future. At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking on a journey where each and every one of us, individually and collectively, welcomes and celebrates individual differences.**:
In this rolel, you are accountable for developing, implementing and executing the RA Information Security strategy and program aligned to the strategic requirements of the RA Business and IT. You will also drive relevant methods, standards, solutions, measures for assuring security of the RA Business. Lead an experienced information security team that provides global coordination and oversight of divisional Information Risk Management processes and strategies. Provide technical expertise to enable the correct defining, establishing, delivering and maintaining of Infrastructure Security Services in the functions, regions and countries.

**Your responsibilities**:

- IS Solutions and Delivery: keeps abreast of technological developments and breakthroughs to identify new security threats and new ways to protect against the emerging security threats and risks.
- Defines the information security services portfolio for IS & business in line with GBS and business IS organization.
- Leads the negotiation of high-level contracts and consulting agreements to provide services and capabilities for the protection of business assets.
- Forecasts and manages information security demands for RA. Interfaces with various operations team for secured delivery of IT services.
- IS Processes
- Supports proactive and reactive management of IT security across entire IS service life cycle. Provides advice on security service definition and supports and helps to monitor and control security on operational services including remediation activity following security incidents/ breaches.
- Ensure training and communications processes aimed at all members of the organization (IT and business as well as vendor) are implemented to ensure that IS security is a priority topic.
- Drives operational excellence in infrastructure and information security services.
- Incidents, Changes and Projects: establishes escalation and communication procedures for information security incidents, integrating these procedures into the business continuity plan.
- Consults and provides input for any incident, change or project, which has, or might have, a major impact on the department, and/ or on the whole of IS.
- IS Compliance: ensures that Infrastructure Services processes (including those of external service providers) are conducted in line with corporate social responsibility, environmental and technical policies and applicable standards and legislation.
- IS Budget: Manages assigned budget effectively and delivers activities within agreed schedules and costs.
- IS Governance: Defines and enforces, in line with IS Governance, a common mandatory Information Security Framework, including directives, tools, policies, standards and architecture.
- Establishes and operates a comprehensive risk focused governance program for information security covering all of RA businesses & functions.
- Drives Information Security reporting to executive leadership and establishes reporting mechanisms for key stakeholders.
- IS Strategy: accountable for developing, implementing and executing RA information security strategy and program.
- Establishes an Information Security roadmap with an ongoing 3-5-year vision aligned with RA and RA IS strategy, relevant threat environment, risks and technology developments.
- Establishes, develops and maintains RA IS Security Architecture, ensuring its alignment with other elements of RA Enterprise Architecture.
- Ensures that GBS IS Security delivery capability is aligned with security architecture and roadmap.
- Manages Industry collaboration and governs the IS Security vendor strategy & relationships.

**Your background**:

- Expert knowledge of GRC frameworks, assurance and security standards, such as COBIT, SOX, SOC1/2, ISAE 3000/3402, ISO27001, NIST, HIPAA, CCPA, GDPR, ITIL etc.
- Thorough understanding of industry, business processes, environmental and market trends, IS and regulatory regulations.

**More about us**: