Cyber Manager - Third Party Risk

Maersk; Pune District; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Maersk is seeking a Cyber Security Manager for Third Party Risk to lead security assessments of suppliers and partners, and to ensure security controls are embedded in vendor agreements.

You will collaborate with Cyber Risk, Procurement and Legal teams across a global transport and logistics business, driving risk-based decisions and continuous improvement in risk management practices.

Qualifications

• Experience in cyber risk management for large/global environments.
• Ability to lead security risk assessments of third parties and suppliers.
• Strong stakeholder management and communication across levels.

Responsibilities

• Conduct detailed cyber security assessments on third parties (e.g. suppliers, partners) consistently and timely
• Report observations and collaborate with business stakeholders and the Cyber Risk team to ensure any identified risks are being managed
• Facilitate the supplier onboarding by performing rapid cyber security assessments and advise on the potential risk exposure
• Act as an SME to ensure appropriate cyber security measures are incorporated in agreements with third parties
• Facilitate the collation of information required to respond to Maersk customer cyber security questions
• Create documentation, reports and dashboards for a variety of audience to facilitate decision making
• Build effective relationships with key stakeholders and teams across Maersk Products, Platforms & Brands
• Drive a culture of understanding and awareness of third party cyber security risk across Maersk
• Focus on continuous improvement of processes, solutions and professional practices of the team

Skills

Cyber risk mgmt

Stakeholder mgmt

Security governance

Communication

Tools

Archer

OneTrust

BitSight

Jira

Job description

Cyber Manager – Third Party Risk

Company Name: A.P. Moller – Maersk

Location: Bangalore, India

We offer

Joining Maersk T&L will embark you on a great journey with career development in a global organisation. As a Cyber Security Manager, you will gain broad business knowledge of the company’s activities globally, as well as understand how the complexity of IT supports the transport and logistics business.

You will be exposed to a wide and challenging range of business issues through regular engagement with key stakeholders across all management levels within Maersk. You will work and communicate across geographical and cultural borders that will enable you to build a strong professional network. We believe people thrive when they are in charge of their career paths and professional growth. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation.

By choosing Maersk, you join not only for the role, but for a career. From here your path may take you towards extended responsibilities within A.P. Moller – Maersk.

We aim to be a world-class professional IT organisation that delivers business value through automation, standardisation and innovation. We believe in empowerment where each of us takes ownership and responsibility for developing and implementing new ways of working.

At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job – we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.

Key responsibilities

• Conduct detailed cyber security assessments on third parties (e.g. suppliers, partners) consistently and timely
• Report observations and collaborate with business stakeholders and the Cyber Risk team to ensure any identified risks are being managed
• Facilitate the supplier onboarding by performing rapid cyber security assessments and advise on the potential risk exposure
• Act as an SME to ensure appropriate cyber security measures are incorporated in agreements with third parties
• Facilitate the collation of information required to respond to Maersk customer cyber security questions
• Create documentation, reports and dashboards for a variety of audience to facilitate decision making
• Build effective relationships with key stakeholders and teams across Maersk Products, Platforms & Brands
• Drive a culture of understanding and awareness of third party cyber security risk across Maersk
• Focus on continuous improvement of processes, solutions and professional practices of the team

Primary Internal Stakeholders

• Cyber Risk
• Portfolio Cyber Teams
• Cyber Security Officers
• Procurement
• Vendor Management Office
• Legal
• Data Privacy
• Commercial
• Enterprise Architecture
• Maersk Portfolios & Platforms
• Maersk Brands

Primary External Stakeholders

• Maersk suppliers
• Maersk customers

We are looking for

• Cyber security assurance experience in a global and similar size business, preferably in third party assurance / vendor risk management roles
• 8-12 years of experience in IT / Cyber security audit & risk management background
• Risk-based and pragmatic approach to security
• Demonstrable understanding of digital native and emerging technologies
• In depth understanding of cyber security standards (e.g. NIST, ISO27001) and their application and their implementation
• Familiarity with GRC and cyber security monitoring tools (e.g. Archer, OneTrust, BitSight, etc.) and task management tools (e.g. Jira)
• Passion for staying up to date with current cyber security events and trends
• Cyber Security Certifications (e.g. CISSP, CISM, CISA) (preferable)
• Proven ability to work and effectively prioritize in a dynamic environment
• Excellent written and verbal communication skills and able to be understood by both technical and non-technical stakeholders
• Stakeholder management and interpersonal/influencing skills
• Excellent organisation, time management, problem-solving skills and attention to detail
• Resilient, can-do attitude and ability to work as part of a team to meet deadlines

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [e-mail].