Cyber Security Manager

A.P. Moller Maersk; Bengaluru; On-site; INR 6,000,000 - 8,000,000; Full time

Job summary

A.P. Moller Maersk is seeking a senior cybersecurity leader in Bengaluru to guide Threat Exposure and Vulnerability Management across diverse environments. The role demands deep technical expertise, strategic oversight, and hands-on mentoring of security professionals to advance the organisation's security posture.

The incumbent will shape the function's strategy, oversee risk governance, and collaborate with Engineering and Business units to deliver value-led security outcomes.

Qualifications

• Demonstrable expertise across Threat Exposure Management, Vulnerability Management, Defensive and Offensive Security, Application Security, Cloud Security, OT/ICS Security, Data and Identity Security, and AI/ML Security.
• Experience spanning large-scale, heterogeneous environments with complex technology stacks.
• Certifications such as CISSP, CISM and GIAC (GMON, GICSP, GWEB, GCSA) are advantageous.

Responsibilities

• Directly managing a team of Threat Exposure and Vulnerability Management Analysts, including mentoring and development.
• Co-develop and drive the function’s technical vision, strategy and roadmap aligned with business objectives.
• Demonstrate deep knowledge of vulnerability management, threat exposure, exploit development concepts, exposure validation, and remediation governance.
• Show robust understanding of OWASP, MITRE ATT&CK, CVE/CVSS, and NIST SP 800-53.
• Lead across IT, OT, Cloud, network security, container environments, and identity-centric security; support AppSec, CI/CD, IaC security, and DevSecOps tooling.
• Build relationships with industry partners, vendors, and the wider tech ecosystem to stay ahead of threats.
• Foster a culture of collaboration, transparency, and accountability across Cyber, Portfolio, Engineering, and Business units.
• Promote staff education, secure behaviors, and a proactive cyber-aware mindset across the organization.

Job description

Relevant Services

• Threat Exposure Management (TEM)

• Vulnerability Management (VM)

• Attack Surface Management (ASM)

• External Attack Surface Management (EASM)

• Enterprise Surface Discovery (ESD)

Professional Background

8–10+ years of progressive experience in enterprise cyber security with demonstrable in-depth technical expertise across Threat Exposure Management, Vulnerability Management, Defensive and Offensive Security, Application Security, Cloud Security, OT/ICS Security, Data and Identity Security, and AI/ML Security. Experience must span large-scale, heterogeneous environments with complex technology stacks. Certifications such as CISSP, CISM and GIAC (GMON, GICSP, GWEB, GCSA) are advantageous, but equivalent hands-on technical capability, advanced analytical proficiency, and a strong record of continuous learning and practical security training are essential.

Leadership & Communication

• Proven experience in directly managing a team of Threat Exposure and Vulnerability Management Analysts, including mentoring, developing and guiding security professionals within a collaborative, high-performing environment.

• Strong strategic and visionary capabilities, with the ability to co-develop and drive the function’s technical vision, strategy and roadmap in alignment with business objectives and the organisation’s threat appetite. Technical Expertise

• Deep knowledge of vulnerability management, threat exposure management, exploit development concepts, exposure validation, and remediation governance.

• Strong understanding of common security vulnerabilities, attack vectors, and security testing frameworks, such as OWASP, MITRE ATT&CK, CVE / CVSS, and NIST SP 800-53.

• Robust expertise across technical domains such as IT, OT, Cloud, network security, container environments, and identity-centric security. Proven capability in AppSec, secure coding practices, CI/CD and IaC security, and DevSecOps tooling.

• Solid understanding of AI/ML architecture, AI security threats, LLM exposure risks, and secure integration patterns.

• Hands-on expertise with tooling in different landscapes: VM, ASM/EASM, AppSec, Cloud, OT, Data, Identity, AI. Stakeholder Engagement & Culture

• Serve as the advisor and central point of contact for all Threat Exposure and Vulnerability Management matters across the organisation within a given scope.

• Build strong relationships with industry partners, vendors, and the wider technology ecosystem to incorporate external expertise, benchmark performance, and stay ahead of emerging threats and vulnerability trends.

• Develop trusted relationships across Cyber, Portfolio teams, Engineering, and Business functions, anchored in transparency, accountability, and the organisation’s core values.

• Lead by example in strengthening collaboration, breaking down silos, and cultivating high-performing cross-functional networks.

• Promote a values-driven culture that embraces diversity, inclusion, and collective ownership of cyber risk.

• Champion staff education, awareness, and secure behaviours to embed a proactive, cyber-aware mindset across the organisation.

• Foster a responsive, delivery-focused culture that partners effectively with Technology and Business units to drive timely resolutions and value-led security outcomes.