Manage, develop, implement, and maintain all necessary information security and privacy policies, standards, and procedures required for a comprehensive Information Security and Privacy Protection Program.
Manage the design, development, implementation, and operation of the information security and privacy program for the collection, use, storage, and destruction of Lottery’s information assets, including information security and privacy awareness training program with attention to relevant policies and practices.
Manage and report the implementation and compliance of the information security and privacy policies and assist Lottery’s Internal Audit (IA) in compliance audits as needed.
Manage and conduct ongoing risk assessments to identify potential vulnerabilities that could threaten the security, confidentiality, and integrity of Lottery’s information assets.
Select cost-effective security to defend against internal and external threats.
Continuous assessment of information security and privacy operations to identify and implement operational improvements and efficiencies.
Manage, monitor, and respond to incidents involving intentional, unintentional, or unauthorized access, disclosure, use, modification, or destruction of Lottery assets.
Respond, investigate, and track security and privacy incidents to resolution.
Demonstrable leadership competencies in the management and development of staff and the Information Security and Privacy Officer with a collaborative attitude and passion for determining a path forward to aid in the successful delivery of projects directly supporting our business and strategic goals.