Cyber Manager - Third Party Risk

A.P. Moller - Maersk; Maharashtra; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

Maersk T&L is seeking a Cyber Security Manager focused on third party risk to join our global IT security team in Bangalore. You will assess cyber risk across suppliers and partners, influence contract security requirements and collaborate with stakeholders across management levels worldwide.

You should bring 8–12 years in IT/cyber security audit and risk management, strong knowledge of NIST/ISO27001, and experience with GRC tools such as Archer or OneTrust.

Qualifications

• 8–12 years IT / cyber security audit & risk management background.
• Familiarity with cyber security standards (e.g. NIST, ISO27001).
• Experience with GRC and monitoring tools such as Archer, OneTrust, BitSight.

Responsibilities

• Conduct detailed cyber security assessments on third parties (e.g. suppliers, partners) consistently and timely.
• Report observations and collaborate with business stakeholders and the Cyber Risk team to ensure risks are managed.
• Facilitate supplier onboarding by performing rapid cyber security assessments and advise on risk exposure.
• Act as SME to ensure cyber security measures are included in third-party agreements.
• Facilitate collection of information to respond to Maersk customer cyber security questions.
• Create documentation, reports and dashboards for various audiences to aid decision making.
• Build relationships with stakeholders across Maersk Products, Platforms & Brands.
• Promote culture of awareness of third-party cyber security risk across Maersk.
• Drive continuous improvement of processes, solutions and practices.

Skills

Cyber security

Vendor risk management

Audit & risk management

Stakeholder management

Communication skills

Tools

Archer

OneTrust

BitSight

Jira

Job description

We offer

Joining Maersk T&L will embark you on a great journey with career development in a global organisation. As a Cyber Security Manager, you will gain broad business knowledge of the company’s activities globally, as well as understand how the complexity of IT supports the transport and logistics business.

Cyber Manager – Third Party Risk

Company Name: A.P. Moller – Maersk
Location: Bangalore, India

We offer

Joining Maersk T&L will embark you on a great journey with career development in a global organisation. As a Cyber Security Manager, you will gain broad business knowledge of the company’s activities globally, as well as understand how the complexity of IT supports the transport and logistics business.
You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.
By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller – Maersk.
We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.
At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job – we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.

Key Responsibilities

• Conduct detailed cyber security assessments on third parties (e.g. suppliers, partners) consistently and timely
• Report observations and collaborate with business stakeholders and the Cyber Risk team to ensure any identified risks are being managed
• Facilitate the supplier onboarding by performing rapid cyber security assessments and advise on the potential risk exposure
• Act as an SME to ensure appropriate cyber security measures are incorporated in agreements with third parties
• Facilitate the collation of information required to respond to Maersk customer cyber security questions
• Create documentation, reports and dashboards for a variety of audience to facilitate decision making
• Build effective relationships with key stakeholders and teams across Maersk Products, Platforms & Brands
• Drive a culture of understanding and awareness of third party cyber security risk across Maersk
• Focus on continuous improvement of processes, solutions and professional practices of the team

Primary Internal Stakeholders

• Cyber Risk
• Portfolio Cyber Teams
• Cyber Security Officers
• Procurement
• Vendor Management Office
• Legal
• Data Privacy
• Commercial
• Enterprise Architecture
• Maersk Portfolios & Platforms
• Maersk Brands

Primary External Stakeholders

• Maersk suppliers
• Maersk customers

We are looking for

• Cyber security assurance experience in a global and similar size business, preferably in third party assurance / vendor risk management roles
• 8-12 years of experience in IT / Cyber security audit & risk management background
• Risk-based and pragmatic approach to security
• Demonstrable understanding of digital native and emerging technologies
• In depth understanding of cyber security standards (e.g. NIST, ISO27001) and their application and their implementation
• Familiarity with GRC and cyber security monitoring tools (e.g. Archer, OneTrust, BitSight, etc.) and task management tools (e.g. Jira)
• Passion for staying up to date with current cyber security events and trends
• Cyber Security Certifications (e.g. CISSP, CISM, CISA) (preferable)
• Proven ability to work and effectively prioritize in a dynamic environment
• Excellent written and verbal communication skills and able to be understood by both technical and non-technical stakeholders
• Stakeholder management and interpersonal/influencing skills
• Excellent organisation, time management, problem-solving skills and attention to detail
• Resilient, can-do attitude and ability to work as part of a team to meet deadlines

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail].