Lead Cyber Risk Management

HYrEzy Tech Solutions

Noida

On-site

INR 1,500,000 - 2,500,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

HYrEzy Tech Solutions is looking for a Cyber Risk Management Lead with 5 to 10 years of experience in cybersecurity. The successful candidate will be responsible for identifying and managing cyber risks, ensuring compliance with regulations, and overseeing internal security assessments. A deep understanding of both cloud environments and enterprise IT infrastructure is essential. This is a full-time position based in Noida with no remote options available.

Qualifications

At least 5 years of experience in Cybersecurity Risk Management.
Experience with cloud environments like AWS and Azure.
At least one security certification such as CISM, CRISC, or CISSP is preferred.

Responsibilities

Identifying and mitigating cyber risks across the organization.
Conducting internal security assessments to ensure compliance.
Managing audits and tracking responses to findings.

Skills

communication skills

cloud security

cyber risk management

internal security assessments

security documentation

incident management

Education

Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Job description

1 week ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

HYrEzy Tech Solutions provided pay range

This range is provided by HYrEzy Tech Solutions. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Experience: 5 to 10 Years
Required Qualification: Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Role: Cyber Risk Management Lead

Experience: 5 to 10 Years
Office location-Sector-125, Noida
Required Qualification: Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Additional Information

There are 2-3 rounds in the interview process.
This is 5 days’ work from office role (No Hybrid/ Remote options available)
Final round will be F2F (Mandatory)

About role: We are seeking a Cyber Risk Management Lead to identify and remediate or mitigate risks. Candidate should have effective task management skills and the ability to communicate effectively. The individual must be able to rapidly respond to security incidents and should have at least 5 years of relevant experience in Cyber security Risk management. Candidates Should have deeper understanding with some hands-on experience on enterprise IT infra components such as O365 suite, advanced firewalls, IPS/IDS/HIPS, routers/switches, VPN, proxy, AV/EDR, DNS, DHCP, multi factor authentication, virtualization, Email systems/security, Web Proxy, WAF, DLP etc. along with cloud environments like AWS (Must), Azure etc.

Job Description

Understanding applicable regulations, guidelines, and industry best practices to manage risk and ensure compliance
Developing, maintaining, or auditing security documentation such as policies, standards, and procedures
Monitoring security internal control effectiveness for EDR, Email Security, Server security, Cloud security etc
Conducting internal security assessments to ensure continued compliance
Explaining roles in managing risk to cross team functions and getting buy-in to improve the organizational risk posture
Managing SOC 2 Type 2 assessment and provide adequate support for collecting relevant evidence for all relevant controls
Should be able to review RFPs (request for proposal) and provide responses for Cyber security related items
Manage Risk Governance
Implement/govern AWS Cloud and Office 365 Security
Manage and support internal and external audits
Follow up till closure on audit findings if any
Manage dashboards and reports to keep track of priority events for IT and IS
Create MOM for Board Meetings
Vendor Evaluation for cyber security controls
Firewall rules review for On-premises and AWS firewall
Security Awareness: Create materials PPT/e-mailers and provide training as needed
Incident management and Business continuity
CISO dashboard and success reports
Meet with business team to understand their business requirements from cyber security perspective
Has basic knowledge of audit requirements (SOC2, HIPPA, ISO27001, etc.)
Understanding of respective industry best practices (e.g., NIST, ISO, OWASP, ITIL)
At least one security certification is strongly preferred, such as Certified Information Security Management (CISM), Certified Risk Information Security Control (CRISC), or Certified Information Systems Security Professional (CISSP)
Prior experience of management of technology infrastructure is preferred

Skills: internal security assessments,communication skills,compliance,security awareness training,cloud security,cyber risk management,security auditing,security awareness,security documentation,switches,cloud environments,dhcp,o365 suite,azure,it infrastructure management,ips/ids/hips,soc 2 type 2 assessment,enterprise it infrastructure,vendor evaluation,firewall management,o365,advanced firewalls,nist, iso, owasp, itil best practices,vpn,cybersecurity risk management,security document auditing,risk management,compliance management,multi-factor authentication,incident response,risk assessment,security assessments,routers/switches,security incident response,cyber risk management lead,ciso dashboard management,soc assesment,incident management,aws,effective communication,dns,aws security,risk governance,business continuity,task management,cyber security,audit management,firewall rules review,waf,dlp,regulatory compliance (soc2, hipaa, iso27001),email systems/security,auditing,cyber security risk management,it infrastructure security,office 365 security,web proxy,aws cloud security,proxy,email security,virtualization,communication,routers,av/edr

Seniority level