Job Responsibilities:

• Provide leadership and oversight of Cyber Security risk management, maintaining governance within the company’s Enterprise Risk Management Framework.
• Manage cyber risk-related program activities, ensuring effective collaboration within the team, as well as with technology, business, and other shareholder groups.
• Maintain the cyber-risk register, control catalogue, and its framework mappings, ensuring alignment of controls and policy documentation while clearly articulating cyber-risks to key stakeholders.
• Maintain and embed an Information Security Policy and management framework across the company in line with relevant legislation and industry standards.
• Own the end-to-end process for cyber security-related policy & standards creation, management, and review, ensuring they incorporate regulatory and other requirements.
• Manage third-party Cyber Risk Assessments for vendor engagements to identify and manage information and Cyber Security risks through third-party suppliers appropriately.
• Manage related metrics, KPIs, and performance indicators, providing regular updates to senior management, audit, regulators, and risk management.
• Mentor junior team members.
• Demonstrate excellent communication skills, conveying complex technical and non-technical concepts verbally and in writing.
• Exhibit excellent project management skills and experience.
• Support various internal and external cyber security audits and regulatory exams.

Qualifications:

• 10 or more years of relevant experience.
• Strong knowledge of technology and cyber risks, with experience in working and collaborating with cross-functional teams leading risk management programs.
• Knowledge of common frameworks and standards such as NIST, CIS, ISO.
• Knowledge and experience of key legal and regulatory compliance, e.g., GDPR, RegSCI.
• Technical as well as policy management experience preferred, with experience across multiple cyber security areas.
• Project planning, management, and delivery skills within the context of a broader cyber security program.
• Financial services experience is preferable, or experience in the financial technology (‘FinTech’) area.
• Ideally hold, or be working toward, a CISM, CISSP, or CRISC qualification.

About the Company:
Company Confidential

Industry:
Computer Hardware