Hold the board-appointed responsibility for day-to-day technology risk oversight and for delivering the board's cyber security strategy.
Build the technology risk and cyber security frameworks, the risk appetite statement and the policy set beneath them, and keep them approved and current.
Run security operations across monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development....