Lead Cyber Risk Management- Noida, Sector 125

HYrEzy Tech Solutions

Noida

On-site

INR 1,200,000 - 2,000,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

A leading technology company is seeking a Cyber Risk Management Lead to manage and mitigate cybersecurity risks. The ideal candidate will have strong task management skills and at least 5 years of experience in cybersecurity sectors, alongside a B.E./B.Tech degree. Responsibilities include risk assessment, compliance monitoring, and incident response, with a focus on cloud security and regulatory requirements.

Qualifications

5 years of relevant experience in Cybersecurity Risk Management.
Understanding of industry regulations and best practices.
At least one security certification is strongly preferred (CISM, CRISC, CISSP).

Responsibilities

Identify and remediate or mitigate cybersecurity risks.
Develop and audit security documentation.
Conduct internal security assessments for compliance.

Skills

security awareness

it infrastructure management

cybersecurity risk management

aws security

risk assessment

Education

Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Job description

6 days ago Be among the first 25 applicants

HYrEzy Tech Solutions provided pay range

This range is provided by HYrEzy Tech Solutions. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Experience: 5 to 10 Years
Required Qualification: Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Role: Cyber Risk Management Lead

Experience: 5 to 10 Years
Office location-Sector-125, Noida
Required Qualification: Bachelor of Engineering - Bachelor of Technology (B.E./B.Tech.)

Additional Information

There are 2-3 rounds in the interview process.
This is 5 days’ work from office role (No Hybrid/ Remote options available)
Final round will be F2F (Mandatory)

About role: We are seeking a Cyber Risk Management Lead to identify and remediate or mitigate risks. Candidate should have effective task management skills and the ability to communicate effectively. The individual must be able to rapidly respond to security incidents and should have at least 5 years of relevant experience in Cyber security Risk management. Candidates Should have deeper understanding with some hands-on experience on enterprise IT infra components such as O365 suite, advanced firewalls, IPS/IDS/HIPS, routers/switches, VPN, proxy, AV/EDR, DNS, DHCP, multi factor authentication, virtualization, Email systems/security, Web Proxy, WAF, DLP etc. along with cloud environments like AWS (Must), Azure etc.

Job Description

Understanding applicable regulations, guidelines, and industry best practices to manage risk and ensure compliance
Developing, maintaining, or auditing security documentation such as policies, standards, and procedures
Monitoring security internal control effectiveness for EDR, Email Security, Server security, Cloud security etc
Conducting internal security assessments to ensure continued compliance
Explaining roles in managing risk to cross team functions and getting buy-in to improve the organizational risk posture
Managing SOC 2 Type 2 assessment and provide adequate support for collecting relevant evidence for all relevant controls
Should be able to review RFPs (request for proposal) and provide responses for Cyber security related items
Manage Risk Governance
Implement/govern AWS Cloud and Office 365 Security
Manage and support internal and external audits
Follow up till closure on audit findings if any
Manage dashboards and reports to keep track of priority events for IT and IS
Create MOM for Board Meetings
Vendor Evaluation for cyber security controls
Firewall rules review for On-premises and AWS firewall
Security Awareness: Create materials PPT/e-mailers and provide training as needed
Incident management and Business continuity
CISO dashboard and success reports
Meet with business team to understand their business requirements from cyber security perspective
Has basic knowledge of audit requirements (SOC2, HIPPA, ISO27001, etc.)
Understanding of respective industry best practices (e.g., NIST, ISO, OWASP, ITIL)
At least one security certification is strongly preferred, such as Certified Information Security Management (CISM), Certified Risk Information Security Control (CRISC), or Certified Information Systems Security Professional (CISSP)
Prior experience of management of technology infrastructure is preferred

Skills: security awareness,it infrastructure management,o365,waf,task management,switches,risk assessment,ciso dashboard management,security awareness training,cyber security,cybersecurity risk management,it infrastructure security,routers,aws security,web proxy,compliance,risk management,soc assesment,risk governance,o365 suite,firewall management,dlp,compliance management,security audits,routers/switches,vpn,security document auditing,nist, iso, owasp, itil best practices,aws cloud security,soc 2 type 2 assessment,business continuity,cyber risk management lead,cyber security risk management,aws,dns,regulatory compliance (soc2, hipaa, iso27001),email security,email systems/security,auditing,communication skills,security assessments,advanced firewalls,security auditing,effective communication,multi-factor authentication,virtualization,cloud environments,dhcp,security documentation,cloud security,internal security assessments,cyber risk management,audit management,azure,incident response,office 365 security,vendor evaluation,incident management,enterprise it infrastructure,firewall rules review,security incident response,av/edr,ips/ids/hips,communication,proxy

Seniority level