Technical Cyber Risk Manager

Travelex; Indi; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Travelex seeks a seasoned Cyber Risk Manager to advance the cyber risk framework and drive risk maturity across the organization. You will lead threat intelligence initiatives, advise business units on security matters, and oversee third-party risk responses and audits.

The role requires a global perspective and strong regulatory engagement. You will partner with Information Governance and Data Privacy, influence senior leadership, and ensure security controls align with industry standards and

Qualifications

• Significant experience of Cyber Security in a global organisation, in information technology and related fields.
• 6–8 years of experience; Big4 exposure or strong technical background.
• Familiarity with ISO27001, PCI-DSS, DORA, NIST CSF, CIS Controls and related global standards.
• Experience implementing and managing risk methodologies and processes.
• Strong analytical, planning and organisational skills.

Responsibilities

• Cyber risk management strategy maturity and framework delivery aligned with governance.
• Monitor, measure and report control effectiveness per strategic direction.
• Define and implement threat intelligence processes with IT security.
• Provide technical advisory to the business on cyber security matters.
• Oversee third-party risk due diligence responses and audits.
• Develop relationships with stakeholders and regulators to ensure assurance.
• Communicate risk effectively across all management levels.

Skills

Cyber risk management

Threat intelligence

Regulatory liaison

ISO27001

NIST CSF

Audits support

Stakeholder management

Penetration testing

Job description

Key Accountabilities :Cyber Risk managementContribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance directionManage cyber risk and the cyber risk framework . Monitor and measure control effectiveness aligned with strategic directionDrive the definition and implementation of an appropriate Threat Intelligence process, alongside IT SecurityProvide technical advisory to the business for all Cyber Security related matters.Oversee the 3rd party risk due diligence responsesProvide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.Adapt security landscape aligning to industry expectations.Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.Assist in maturing the Cyber risk and technology risk landscape.Create clear and relatable risk statements and communicate risk effectively with all levels of managementManage penetration tests and schedulesManagement ResponsibilitiesSupport the functional management of the Cyber Risk Management team.Provide employee mentoring guidance to the Cyber Risk analystsSupport in the implementation, growth and management of insider threatRelationship ManagementOperate as a Business Information Security Partner , supporting the business units and Geos in all technology changes and strategiesDevelop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.Raise awareness and profile of cyber risk and architecture across the business at all levels.CommunicationWrites and speaks fluently on all aspects of work and communicates effectively with all levels of management.Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management .Actively communicate and seek feedback from colleagues and customers.Perform leadership updates in t eam b riefs.Ensure feedback to line manager outlining general activities of role.Experience and Skillsets required :Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.Experience of implementing and managing r isk methodologies and processes .Technical cyber security backgroundPossess effective analytical planning and organisational skills.Demonstrate a proven ability to deliver with a high level of quality focus.Ability to communicate effectively at all levels and to influence key stakeholders.Have a professional approach with a confident assertive styleBuild & maintain strong relationships with peers and colleaguesCertification such as CISSP, CISM, CEH, etc.