IT&Data CS 3rd Party Risk Mgt

Job Description:

• Cyber Risk Governance
• Maintain and execute the Cyber Risk Management Framework and related governance processes
• Own and keep current the cyber risk register, ensuring risks are documented, assessed, and reviewed on a regular basis
• Provide support to risk governance committees and cybersecurity steering forums
• Ensure cyber risks are mapped to Enterprise Risk Management (ERM) standards and methodologies
• Risk Assessment Monitoring
• Conduct cyber risk assessments covering applications, infrastructure, cloud platforms, projects, and third-party services
• Assess emerging threats, vulnerabilities, and risk exposures that may impact business operations
• Monitor risk treatment plans and ensure timely remediation of identified risks
• Control Assurance Compliance
• Manage security risk exceptions and perform compensating control assessments
• Ensure alignment with cybersecurity frameworks, standards, and regulations e
• g
• ISO 27001 NIST CSF CIS Controls GDPR DORA NIS2
• Reporting Stakeholder Management
• Create regular cyber risk reports and dashboards for management and leadership teams
• Communicate cyber risk exposure, remediation progress, and risk trends to stakeholders
• Partner with Security Operations, Infrastructure, Application, Data, and Business teams to advance risk-reduction initiatives
• Serve as a trusted advisor on cyber risk matters for business and technology stakeholders

Key Responsibilities:

• Must Have
• Functional Technical Skills RN2
• 1 SK2
• 2
• Cyber Risk Management and Risk Assessment methodologies
• Strong understanding of Information Security and Cybersecurity principles
• Knowledge of Governance, Risk, and Compliance (GRC) processes
• Experience with cybersecurity frameworks and standards including ISO 27001 and NIST CIS Controls
• Basic understanding of cloud security, infrastructure security, application security, and data protection concepts
• Experience preparing and advising business stakeholders on mitigation strategies best suited to the situation
• Experience managing risk registers, KRIs, KPIs, and remediation tracking
• Strong reporting, dashboarding, and analytical skills
• Behavioral Competencies
• Strong stakeholder management and influencing skills
• Flexibility and ability to tailor frameworks and controls to specific business cases and risks
• Excellent communication and presentation abilities
• Analytical and problem-solving mindset
• Ability to prioritize and manage multiple risks and initiatives
• Collaboration and teamwork across global and multicultural environments
• High attention to detail and governance discipline
• Good to Have
• Functional Technical Skills
• Experience with NIS2, GDPR, and other regulatory frameworks
• Knowledge of Third Party Risk Management (TPRM)
• Experience with cybersecurity risk management tools and GRC platforms e
• g
• ServiceNow GRC Archer
• Understanding of Security Operations, Vulnerability Management, and Incident Response processes
• Data analytics and reporting automation capabilities: Power BI, Tableau, Excel, and advanced analytics

Preferred Skills:

Security testing->Cloud Security,SOC,Technology->Vulnerability Management->DAST, SAST, VM Scan, Penetration Testing, Exploitation Frameworks, Simulation of Security Awareness,Technology->GRC->GCP - Risk and Compliance,Tools->Service Now->ServiceNow-Security