Define, implement, and maintain security strategy, policies, goals, and requirements. Develop information security vision, strategy, and roadmap with senior leadership. Recruit and nurture the security team. Advocate for information security best practices and drive security awareness. Drive the security risk management program and enterprise risk management frameworks. Manage and improve Application Security initiatives. Build Security Incident Response processes and culture. Report on security risks, threats, incidents, and performance to top management. Drive security compliance requirements. Supervise the management and improvement of the ISMS.