Cyber Risk & Compliance Leader (ISMS & Policy)

ASSA ABLOY Global Solutions; New Haven (CT); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Healthcare options

Tuition reimbursement

401k matching

Generous holiday schedule

Job summary

ASSA ABLOY Americas is seeking a Cybersecurity Risk and Compliance Manager to strengthen the organization’s information security and risk program. This onsite role, based in New Haven, CT, reports to the Division CISO and collaborates across functions to identify, analyze, and treat cyber risks while defining and reporting on information security compliance.

The ideal candidate will have security certifications (CISM or CISSP), CRISC/ISO27005 preferred, and at least 3 years of global

Qualifications

• Professional certification in Information Security (CISM or CISSP).
• CRISC or ISO27005 certification preferred.
• Minimum 3 years of experience in a global cybersecurity management role.
• Proven experience implementing and operating information security risk and compliance programs.
• Strong knowledge of current digital service delivery concepts and cyber protection capabilities.
• Ability to articulate risks in clear business language.
• Excellent business and IT communication skills in English.

Responsibilities

• Establish divisional cyber risk governance.
• Build divisional risk management culture and methodologies.
• Translate business requirements into IT policies and controls for transformation.
• Define, monitor and report on information security compliance within ISMS with KPIs and KRIs.
• Develop deep coalitions with business partners to anchor information security into policy framework.
• Collaborate with corporate counsels and HR to monitor enforcement of standards.
• Review policies periodically to identify hidden risks or non-conformity issues.
• Evaluate the efficiency of controls and improve them continuously.

Job description

ASSA ABLOY Americas is seeking a Cybersecurity Risk and Compliance Manager to strengthen the organization’s information security and risk program. This onsite role, based in New Haven, CT, reports to the Division CISO and collaborates across functions to identify, analyze, and treat cyber risks while defining and reporting on information security compliance.

The ideal candidate will have security certifications (CISM or CISSP), CRISC/ISO27005 preferred, and at least 3 years of global