IN
Job Description
Job Overview:
Main Duties:
- Essential Qualifications
- Functional Technical Skills RN2
- 1 SK2
- 2
- Expertise in Cyber Risk Management and Risk Assessment methodologies
- Comprehensive knowledge of Information Security and Cybersecurity principles
- Familiarity with Governance Risk and Compliance (GRC) processes
- Proficient in cybersecurity frameworks and standards such as ISO 27001, NIST, and CIS Controls
- Basic understanding of concepts related to cloud security, infrastructure security, application security, and data protection
- Experience in developing and advising on various mitigation strategies tailored to specific scenarios
- Proficient in managing risk registers, Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and tracking remediation efforts
- Strong skills in reporting, dashboard creation, and analytical evaluation
- Behavioral Competencies
- Exceptional stakeholder management and influencing capabilities
- Ability to adapt approaches, frameworks, and controls to meet specific business cases and risks
- Outstanding communication and presentation skills
- Analytical mindset with strong problem-solving abilities
- Proficient in prioritizing and managing multiple risks and initiatives
- Collaboration and teamwork skills across diverse, global environments
- Meticulous attention to detail and governance adherence
- Desirable Qualifications
- Functional Technical Skills
- Experience with NIS2, GDPR, and other regulatory frameworks
- Knowledge of Third Party Risk Management (TPRM)
- Experience with tools for cybersecurity risk management and GRC platforms, e.g., ServiceNow, Archer
- Understanding of Security Operations, Vulnerability Management, and Incident Response processes
- Skills in data analytics and reporting automation, such as Power BI, Tableau, and advanced Excel analytics
Technical Skills Required:
- Cyber Risk Governance
- Develop and implement the Cyber Risk Management Framework along with related governance processes
- Oversee the cyber risk register, ensuring all risks are documented, evaluated, and frequently reviewed
- Support risk governance committees and cybersecurity steering forums
- Align cyber risks with Enterprise Risk Management (ERM) standards and methodologies
- Risk Assessment Monitoring
- Perform cyber risk assessments for applications, infrastructure, cloud platforms, projects, and third-party services
- Assess emerging threats, vulnerabilities, and risk exposures that may affect business operations
- Monitor risk treatment plans and ensure prompt remediation of identified risks
- Control Assurance Compliance
- Manage security risk exceptions and evaluate compensating control assessments
- Ensure compliance with cybersecurity frameworks, standards, and regulations such as ISO 27001, NIST CSF, CIS Controls, GDPR, DORA, NIS2
- Reporting and Stakeholder Management
- Generate regular cyber risk reports and dashboards for management and leadership teams
- Communicate cyber risk exposure, remediation efforts, and risk trends to stakeholders
- Collaborate with Security Operations, Infrastructure, Application, Data, and Business teams to implement risk reduction initiatives
- Serve as a trusted advisor on cyber risk issues for business and technology stakeholders