Technical Cyber Risk Manager

Travelex; Maharashtra; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Travelex is seeking a seasoned Cyber Risk Leader to mature the risk management strategy and oversee the cyber risk framework. You will supervise risk monitoring, demand alignment with governance, and drive Threat Intelligence initiatives in collaboration with IT Security.

You will advise on cyber security to business units and regulators, and lead 3rd party risk diligence. You will partner with Governance, Risk, and Compliance teams to ensure controls are effective, and mentor the Cyber Risk

Qualifications

• Significant Cyber Security experience in a global organisation (6–8 years, Big4 or strong technical background).
• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards.
• Experience implementing and managing risk methodologies and processes.
• Technical cyber security background.
• Ability to communicate effectively at all levels and influence stakeholders.
• Professional approach with a confident assertive style.
• Certification such as CISSP, CISM, CEH, etc.

Responsibilities

• Contribute to the maturity of the cyber risk management strategy and cyber security framework delivery.
• Manage cyber risk and the cyber risk framework; monitor and measure control effectiveness aligned with strategic direction.
• Drive the definition and implementation of Threat Intelligence processes with IT Security.
• Provide technical advisory to the business for all Cyber Security matters.
• Oversee 3rd party risk due diligence responses.
• Provide Cyber Security oversight for internal and external audits; represent Travelex for SME expertise to regulators and customers.
• Adapt security landscape to industry expectations.
• Interact with Information Governance and Data Privacy for information management alignment.
• Assist in maturing the cyber risk and technology risk landscape.
• Create clear risk statements and communicate risk to all management levels.
• Manage penetration tests and schedules.
• Support the Cyber Risk Management team; mentor analysts; grow insider threat initiatives.
• Operate as a BIS partner to business units and Geos; maintain stakeholder relationships.
• Raise awareness of cyber risk across the business; ensure assurance visibility.

Skills

Cyber Security

Risk Management

Threat Intelligence

Stakeholder Mgmt

Regulatory Liaison

Audit Support

ISO27001

CISSP/CISM

Communication

Analytics

Job description

• Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction
• Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction
• Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security
• Provide technical advisory to the business for all Cyber Security related matters.
• Oversee the 3rd party risk due diligence responses
• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.
• Adapt security landscape aligning to industry expectations.
• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.
• Assist in maturing the Cyber risk and technology risk landscape.
• Create clear and relatable risk statements and communicate risk effectively with all levels of management
• Manage penetration tests and schedules

Key Accountabilities

Cyber Risk management

• Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction
• Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction
• Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security
• Provide technical advisory to the business for all Cyber Security related matters.
• Oversee the 3rd party risk due diligence responses
• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.
• Adapt security landscape aligning to industry expectations.
• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.
• Assist in maturing the Cyber risk and technology risk landscape.
• Create clear and relatable risk statements and communicate risk effectively with all levels of management
• Manage penetration tests and schedules

Management Responsibilities

• Support the functional management of the Cyber Risk Management team.
• Provide employee mentoring guidance to the Cyber Risk analysts
• Support in the implementation, growth and management of insider threat

Relationship Management

• Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies
• Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.
• Raise awareness and profile of cyber risk and architecture across the business at all levels.

Communication

• Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.
• Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management.
• Actively communicate and seek feedback from colleagues and customers.
• Perform leadership updates in team briefs.
• Ensure feedback to line manager outlining general activities of role.

Experience And Skillsets Required

• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)
• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.
• Experience of implementing and managing risk methodologies and processes.
• Technical cyber security background
• Possess effective analytical planning and organisational skills.
• Demonstrate a proven ability to deliver with a high level of quality focus.
• Ability to communicate effectively at all levels and to influence key stakeholders.
• Have a professional approach with a confident assertive style
• Build & maintain strong relationships with peers and colleagues
• Certification such as CISSP, CISM, CEH, etc.