Cybersecurity Risk Specialist

Core Responsibilities

• Request, assess, and provide responses regarding information security processes and controls for:

- Regulatory examinations

- External audits and meetings

- Surveys and questionnaires

- Attestations and internal audits

• Engage with internal stakeholders concerning alerts and advisories from regional regulatory bodies.
• Work alongside stakeholders to identify, onboard, and submit change requests related to non-financial regulatory reports (NFRR) in the context of information security.
• Support the Regulatory Exam Management team by offering regional governance for potentially reportable cyber incidents.
• Lead initiatives for the Regulatory Exam Management team in alignment with the annual strategic plan.
• Ensure that the team’s processes and playbooks are up-to-date, effective, and efficient.

Essential Qualifications

• Bachelor's degree in Information Technology or a related discipline.
• 5-7 years of experience in cybersecurity, risk management, or regulatory compliance.
• Strong operational focus with meticulous attention to detail.
• Outstanding analytical and problem-solving capabilities with a strong conceptual thinking ability.
• Proficient in presenting information to executives and senior management teams.
• Familiarity with information security principles, processes, and controls.
• Knowledge of APAC laws, regulations, and standards concerning information security.
• Exceptional command of the English language, with strong verbal and written communication abilities.
• Preferred certifications include: CISSP, CISA, CRISC, or CISM.