Technical Cyber Risk Manager

Travelex India Private Limited; Mumbai; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Travelex India Private Limited seeks a seasoned Cyber Risk professional to drive risk management strategy and governance across the organization. You will oversee risk assessments, policy adherence, and third-party due diligence to protect information assets.

The role requires strong analytical skills, stakeholder management, and fluency in risk communications up to executive levels; certifications such as CISSP/CISM CEH are a plus, and prior exposure to ISO27001 / NIST CSF is valued.

Qualifications

• Significant cyber security experience in a global org or equivalent.
• Familiarity with ISO27001, PCI-DSS, NIST CSF, CIS Controls.
• Experience implementing risk methodologies and processes.
• Technical cyber security background.
• Strong analytical planning and organisational skills.
• Ability to communicate effectively with all levels of management and stakeholders.
• Certifications such as CISSP, CISM, CEH are desirable.

Responsibilities

• Oversee cyber risk management and framework delivery across the business.
• Manage third-party risk due diligence and audits.
• Provide advisory to business units on cyber security matters.
• Develop and mature risk statements and communicate at all levels.
• Lead penetration testing oversight and risk reporting.

Skills

Cyber security expertise

Risk management

Regulatory standards knowledge

Analytical thinking

Stakeholder communication

Job description

Key Accountabilities:

Cyber Risk management Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security Provide technical advisory to the business for all Cyber Security related matters. Oversee the 3rd party risk due diligence responses Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers. Adapt security landscape aligning to industry expectations. Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations. Assist in maturing the Cyber risk and technology risk landscape. Create clear and relatable risk statements and communicate risk effectively with all levels of management Manage penetration tests and schedules Management Responsibilities Support the functional management of the Cyber Risk Management team. Provide employee mentoring guidance to the Cyber Risk analysts Support in the implementation, growth and management of insider threat Relationship Management Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations. Raise awareness and profile of cyber risk and architecture across the business at all levels. Communication Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management. Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management. Actively communicate and seek feedback from colleagues and customers. Perform leadership updates in team briefs. Ensure feedback to line manager outlining general activities of role.

Experience and Skillsets required:

• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)
• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.
• Experience of implementing and managing risk methodologies and processes.
• Technical cyber security background.
• Possess effective analytical planning and organisational skills.
• Demonstrate a proven ability to deliver with a high level of quality focus.
• Ability to communicate effectively at all levels and to influence key stakeholders.
• Have a professional approach with a confident assertive style Build & maintain strong relationships with peers and colleagues Certification such as CISSP, CISM, CEH, etc.

Founded in 1976, Travelex has grown to become one of the market leading specialist providers of foreign exchange products, solutions and services, operating across the entire value chain of the foreign exchange industry in more than 20 countries. We have developed a growing network of over 900 ATMs and more than 1,100 stores in the some of the world’s top international airports and in major transport hubs, premium shopping malls, high street locations, supermarkets and city centres. Travelex has built a growing online and mobile foreign exchange platform, and we also process and deliver foreign currency orders for major banks, travel agencies and hotels worldwide. In addition, we source and distribute large quantities of foreign currency banknotes for customers on a wholesale basis - including for central banks and international financial institutions. We also offer a range of remittance and international money transfer products around the world.