Direct and approve the design of security systems;

Ensure that disaster recovery and business continuity plans   are in place and tested;

Review and approve security policies, controls and cyber   incident response planning;

Approve identity and access policies;

Review investigations after breaches or incidents, including   impact analysis and recommendations for avoiding similar vulnerabilities;

Maintain a current understanding the IT threat landscape for   the industry;

Ensure compliance with the changing laws and applicable   regulations;

Translate that knowledge to identification of risks and   actionable plans to protect the business;

Schedule periodic security audits;

Oversee identity and access management;

Make sure that cyber security policies and procedures are   communicated to all personnel and that compliance is enforced;

Manage all teams, employees, contractors and vendors involved   in IT security, which may include hiring;

Provide training and mentoring to security team members and   employees;

Constantly update the cyber security strategy to leverage new   technology and threat information;

Brief the executive team on information security status and   risks, including taking the leading role for the overall strategy and   necessary budget; and

Communicate best practices and risks to all parts of the   business, outside IT.