• support and provide security advice for projects and services in order to implement  appropriate security measures and controls to mitigate the identified risks,  • regularly report on the status of IT security to the Director of Information Systems  and Executive Office,  • escalate IT security issues as necessary,  • design and document Common IT Security Controls, coordinate their  implementation and design / document regular checks to ensure that the controls  are in place and work efficiently,  • manage IT security incident response as defined in the IT Security Service  description,  • coordinate regular security assessments and security tests as defined in the IT  Security Service description, and • provide support for audits when the Information Systems Directorate is audited,  especially if the audit focuses on IT security.  The role of the IT Security Officer is cross-functional and requires close co-operation  within and beyond the Directorate. The IT Security Officer coordinates implementation of  security improvements together with the Information Systems Directorate ’s  Director,  Heads of Units, Programme Managers and Team Leaders and other relevant parties and  provides security consultation for projects and services by working closely with the  architectures, Project Managers, system administrators, Service Managers and other key  partners. The IT Security Officer works in close co-operation with the Security Manager  from the Executive Office. The IT Security Officer has an expert and advisory role in the risk management process.  He performs risk assessments and proposes risk mitigation options for the decision  makers. Nnote that the IT Security Officer does not make risk management decisions  himself. Contract management may be performed by any of the roles described in this document.  The contract management activities and in general, acting as the Contract Manager, can  be assigned as part of the job description or agreed separate as necessary.  Page  71  of  92 TEM-0129.01  Uncontrolled copy once printed. Ensure that the right version is in use.  o risks,  o problems,  o payments and payment conditions,  o financial issues,  o performance (including verification of compliance of the supplies and  services with the requirements of the contract),  • manages all aspects of the contract in accordance with the terms and conditions of  the contract, including  3.10.7. Roles and Responsibilities - Contract Management  Contract Manager (CoM)  Document code:  Security level:  Effective date:  ICT Governance  PRO-0027.06  Internal  15/01/2019  The Contract Manager 