Information Security Risk Leader

OP Mobility; Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

OPmobility is seeking an Information Security Risk Leader to be the point of contact for risk analysis activities across projects, assessing cyber maturity and managing security assurance plans.

You will oversee risk analyses, act as tool owner for the analytics platform, implement improvements, and support groups in adopting the tools while maintaining the Group Cyber Risk Matrix and TPSM processes.

Qualifications

• Higher education degree (5 years) in IT, IT risk management, auditing, or equivalent.
• Significant experience in IT risk management for on-premises and cloud environments.
• Proven experience in assessing the cyber maturity level of third parties (TPSM/TPRM).
• Proficient in ISO 27005, ISO 27001, EBIOS RM (or equivalent) standards and risk mapping tools.
• Known for rigor, analytical skills, listening skills, and communication skills.
• Comfortable speaking and writing in English.

Responsibilities

• Oversee risk analysis missions when carried out by an external partner.
• Carry out risk analyses in projects (ISP) using our tool; be the tool & process owner.
• Propose and implement enhancements to the existing tool (Excel spreadsheet).
• Support Business Groups in adopting the tools and train them in risk analyses.
• Participate in maintaining the Group Cyber Risk Matrix risk mapping.
• Oversee Security Assurance Plan phases in projects and tenders; propose improvements to PAS documents.
• Third‑party risk management under TPSM; oversee validation of responses to Security Evaluation questionnaires.
• Propose and implement improvements to the TPSM questionnaire.
• Draft security policies in line with ISMS and contribute to cyber roadmap projects.

Skills

IT risk management

Risk analysis

Auditing

ISO 27005

ISO 27001

EBIOS RM

Risk mapping

English fluency

Analytical skills

Listening skills

Education

IT risk mgmt degree

Auditing background

5-year higher ed in IT

Job description

Select how often (in days) to receive an alert:

Information Security Risk Leader

Hungry for challenges? Join a group with innovation at its heart and contribute to the automotive revolution!

OPmobility is a world-leading provider of innovative solutions for a unique, safer and more sustainable mobility experience. Innovation-driven since its creation, the Group develops and produces intelligent exterior systems, customized complex modules, lighting systems, clean energy systems and electrification solutions for all mobility companies. With a €11.4 billion economic revenue in 2023, a global network of 152 plants and 40 R&D centers, OPmobility relies on its 40,300 employees to meet the challenges of transforming mobility.

Our ambition? Provide automakers with cutting‑edge equipment and solutions to develop tomorrow’s clean and connected car.

As Information Security Risk Leader, you will be the point of contact for all risk analysis activities in projects, assessing the cyber maturity level of our partners and managing the associated security assurance plans.

You will be responsible for the following tasks and responsibilities:

• Oversee risk analysis missions when they are carried out by an external partner
• Carry out risk analyses in projects (ISP) using our tool, for which you will be the “tool & process owner”
• Propose and implement the necessary enhancements to the existing tool (Excel spreadsheet)
• Support Business Groups in adopting the tools and assist/train them in carrying out risk analyses in projects
• Participate in maintaining the Group Cyber Risk Matrix risk mapping

Security Assurance Plan:

• As the “owner,” oversee the “Security Assurance Plan” phases in projects and calls for tenders;
• Propose and implement identified improvements to the various existing PAS documents;
• Third‑party risk management:
• As part of the TPSM (Third-Party Security Management) process, oversee the validation phase for responses to Security Evaluation questionnaires provided by our partners
• Propose and implement necessary improvements to the TPSM questionnaire

Other:

• Contribute to drafting security policies in line with current requirements and the ISMS
• Contribute to certain projects in the cyber roadmap approved for the Strat plan

For these all the activities, you will work with:

• External
• IT and cybersecurity solution publishers and integrators
• Internal
• Members of the Cybersecurity team
• Project managers and IS and IT experts from Opmobility Group
• Members of the Digital & IS Department from all Business Groups
• Business stakeholders from OPmobility Business Groups

Required profile:

OPmobility is looking for someone who can perform all the above tasks.

• You have a higher education degree (5 years of higher education) in IT, IT risk management, auditing, or equivalent.
• You have significant experience in IT risk management for on-premises and cloud environments
• You have proven experience in assessing the cyber maturity level of third parties (TPSM/TPRM)
• You are proficient in ISO 27005, ISO 27001, EBIOS RM (or equivalent) standards and risk mapping tools
• You are known for your rigor, analytical skills, listening skills, and communication skills
• You are comfortable speaking and writing in English.

As a responsible company, OPmobility pays particular attention to diversity and equality within its teams and the Group commits to treat all job applications equally.