Cyber Manager - Third Party Risk

Damco Spain SL; Bengaluru; Hybrid; INR 2,500,000 - 4,500,000; Full time

Job summary

Maersk seeks a Cyber Security Manager to lead third‑party risk assessments and advise on risk exposure for global suppliers and partners. You will work with Cyber Risk, Procurement, Legal, and Business teams across borders to build a robust security program.

The role requires 8–12 years in IT/cyber security audit and risk management, strong communication, and knowledge of NIST/ISO27001 standards and GRC tools. A dynamic, globally distributed environment awaits.

Qualifications

• 8-12 years of IT / Cyber security audit & risk management background.
• Knowledge of NIST and ISO27001 standards and their implementation.
• Experience with global, third-party risk & vendor assurance.

Responsibilities

• Conduct detailed cyber security assessments on third parties; report findings and work with stakeholders to manage risks.
• Facilitate onboarding by assessing security posture and advising on risk exposure.
• Create documentation and dashboards to enable decision making for senior leadership.

Skills

Cyber security

Risk management

Stakeholder management

Communication

Certifications

Education

Bachelor's degree in IT

Tools

Archer

OneTrust

BitSight

Jira

Job description

Joining Maersk T&L will embark you on a great journey with career development in a global organisation. As a Cyber Security Manager, you will gain broad business knowledge of the company’s activities globally, as well as understand how the complexity of IT supports the transport and logistics business.

You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.

By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller – Maersk.

We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.

At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job – we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.

Key responsibilities

• Conduct detailed cyber security assessments on third parties (e.g. suppliers, partners) consistently and timely
• Report observations and collaborate with business stakeholders and the Cyber Risk team to ensure any identified risks are being managed
• Facilitate the supplier onboarding by performing rapid cyber security assessments and advise on the potential risk exposure
• Act as an SME to ensure appropriate cyber security measures are incorporated in agreements with third parties
• Facilitate the collation of information required to respond to Maersk customer cyber security questions
• Create documentation, reports and dashboards for a variety of audience to facilitate decision making
• Build effective relationships with key stakeholders and teams across Maersk Products, Platforms & Brands
• Drive a culture of understanding and awareness of third party cyber security risk across Maersk
• Focus on continuous improvement of processes, solutions and professional practices of the team

Primary Internal Stakeholders

• Cyber Risk
• Cyber Security Officers
• Procurement
• Legal
• Data Privacy
• Commercial
• Maersk Brands

Primary External Stakeholders

• Maersk suppliers
• Maersk customers

We are looking for

• Cyber security assurance experience in a global and similar size business, preferably in third party assurance / vendor risk management roles
• 8-12 years of experience in IT / Cyber security audit & risk management background
• Risk-based and pragmatic approach to security
• Demonstrable understanding of digital native and emerging technologies
• In depth understanding of cyber security standards (e.g. NIST, ISO27001) and their application and their implementation
• Familiarity with GRC and cyber security monitoring tools (e.g. Archer, OneTrust, BitSight, etc.) and task management tools (e.g. Jira)
• Passion for staying up to date with current cyber security events and trends
• Cyber Security Certifications (e.g. CISSP, CISM, CISA) (preferable)
• Proven ability to work and effectively prioritize in a dynamic environment
• Excellent written and verbal communication skills and able to be understood by both technical and non-technical stakeholders
• Stakeholder management and interpersonal/influencing skills
• Excellent organisation, time management, problem-solving skills and attention to detail
• Resilient, can-do attitude and ability to work as part of a team to meet deadlines

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail] .