Technical Cyber Risk Manager

Travelex; Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Travelex is seeking a seasoned Cyber Risk Manager to mature the organisation's cyber risk strategy and risk framework. You will partner with business units and geo teams to ensure risk-informed decisions and regulatory alignment.

Key duties include advisory on security matters, oversight of audits, and leadership of a small risk team focused on mitigating threats and improving risk posture across technology and data privacy. A strong technical background and stakeholder influence are essential.

Qualifications

• Significant cyber security experience in a global organisation.
• Experience implementing risk methodologies and processes.
• Familiar with ISO27001, PCI-DSS, NIST CSF and CIS Controls.
• Professional approach with ability to influence stakeholders.
• CISSP, CISM, CEH, or related certifications preferred.

Responsibilities

• Contribute to the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence.
• Manage cyber risk and monitor control effectiveness aligned with strategy.
• Drive Threat Intelligence processes with IT Security.
• Provide technical advisory to the business on Cyber Security matters.
• Oversee 3rd party risk due diligence responses.
• Provide Cyber Security oversight for audits and regulatory interactions.
• Adapt security landscape to industry expectations.

Skills

Cyber security experience

Risk management

Stakeholder comms

Analytical planning

Regulatory understanding

Tools

ISO27001

PCI-DSS

NIST CSF

CIS Controls

DORA

Job description

Job Description:

Key Accountabilities

Cyber Risk management

• Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction
• Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction
• Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security
• Provide technical advisory to the business for all Cyber Security related matters.
• Oversee the 3rd party risk due diligence responses
• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.
• Adapt security landscape aligning to industry expectations.
• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.
• Assist in maturing the Cyber risk and technology risk landscape.
• Create clear and relatable risk statements and communicate risk effectively with all levels of management
• Manage penetration tests and schedules

Management Responsibilities

• Support the functional management of the Cyber Risk Management team.
• Provide employee mentoring guidance to the Cyber Risk analysts
• Support in the implementation, growth and management of insider threat

Relationship Management

• Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies
• Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.
• Raise awareness and profile of cyber risk and architecture across the business at all levels.

Communication

• Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.
• Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management.
• Actively communicate and seek feedback from colleagues and customers.
• Perform leadership updates in team briefs.
• Ensure feedback to line manager outlining general activities of role.

Experience And Skillsets Required

• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)
• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.
• Experience of implementing and managing risk methodologies and processes.
• Technical cyber security background
• Possess effective analytical planning and organisational skills.
• Demonstrate a proven ability to deliver with a high level of quality focus.
• Ability to communicate effectively at all levels and to influence key stakeholders.
• Have a professional approach with a confident assertive style
• Build & maintain strong relationships with peers and colleagues
• Certification such as CISSP, CISM, CEH, etc.