Descripción
The Head of Information Security is responsible for defining, implementing, and governing the organization's information security strategy during a business carve-out and Azure tenant separation program. This role ensures that security is Embedded into all transformation activities, establishing an independent security operating model, governance framework, and security architecture that supports regulatory compliance, business objectives, and risk management requirements from Day 1. Key responsibilities Information Security strategy & governance: Define, maintain, and communicate the organization's information security strategy, policies, standards, and control framework. Establish and lead the Information Security Program, ensuring alignment with business objectives, regulatory obligations, and industry best practices. Obtain executive leadership approval for security initiatives and ensure ongoing alignment with Board-approved risk appetite. Develop and maintain security governance structures, reporting mechanisms, and decision-making forums. Create and manage security policies, standards, procedures, and governance documentation. Security architecture & Azure tenant design: Own the security architecture and design for the new Azure tenant environment. Define and implement identity and access management controls, conditional access policies, privileged access management, and Zero Trust security principles. Ensure security requirements are Embedded into the design and deployment of all new platforms and services. Establish tenant security boundaries and governance controls to support secure business separation. Deliver a Day-1-ready security architecture that supports business operations immediately upon transition. Carve-out & transformation Security: Ensure security-by-design principles are applied throughout the carve-out and migration lifecycle. Review, challenge, and approve migration and transformation initiatives from a security risk perspective. Identify a