Cyber Risk Manager

The British American Tobacco Group; Winston-Salem (NC); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

401(k) plan

Health benefits

Tuition reimbursement

Paid time off

Job summary

Reynolds American is seeking a Cyber Risk Manager to identify, assess, and manage cyber risks while protecting confidential information across the organization. You will work with cross‑functional teams to implement robust risk management strategies and policies.

The role focuses on building relationships with business units, conducting risk assessments, maintaining risk registers, and driving continuous improvement in cybersecurity practices.

Qualifications

• Bachelor’s degree in Computer Science or equivalent.
• Ability to conduct risk assessments and analyse threats and vulnerabilities in environments.
• Skill in developing risk mitigation strategies and prioritising security controls.

Responsibilities

• Develop cybersecurity policies and procedures to protect sensitive data.
• Ensure compliance with laws, regulations, and standards.
• Collaborate with IT to integrate cybersecurity measures across operations.
• Stay updated on trends to enhance the organization’s cybersecurity posture.
• Evaluate and manage third‑party vendors for security.
• Prepare and present regular security status reports.

Skills

Risk assessments

Threat modeling

Security controls

Communication

Data-driven decisions

Education

Bachelor’s degree in Computer Science

Tools

IDPS

VPNs

Job description

Reynolds American is evolving into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.

To achieve our ambition, we are looking for colleagues who are ready to join us on this journey. Tomorrow can’t wait, let’s shape it together!

REYNOLDS AMERICAN has an exciting opportunity for a Cyber Risk Manager in Winston Salem

We are seeking a highly skilled and experienced Cyber Risk Manager to join our dynamic and growing team. The ideal candidate will be responsible for identifying, assessing, and managing cyber risks to protect our organization's information assets and ensure the confidentiality, integrity, and availability of our data. The Cyber Risk Manager will work closely with various departments to develop and implement effective risk management strategies and policies.

Direct impact of this role:

• Build and maintain successful relationships with your business teams, Enterprise Risk Management team, Global Cyber Governance Risk & Compliance teams
• Work with Enterprise Risk Management and Cyber Governance Risk & Compliance teams to conduct comprehensive risk assessments to identify potential cyber threats and vulnerabilities.
• Analyze the potential impact of identified risks on the organization's operations and assets.
• Work with Enterprise Risk Management team to maintain a risk register to document identified risks and their corresponding mitigation strategies.
• Monitor and review the effectiveness of risk management strategies and make necessary adjustments.

Your key responsibilities will include:

• Policy Development: Develop, implement, and maintain cybersecurity policies and procedures to ensure the security of sensitive data and information.
• Compliance: Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity.
• Collaboration: Collaborate with IT and other departments to ensure cybersecurity measures are integrated into all aspects of the organization’s operations.
• Continuous Improvement: Stay updated on the latest cybersecurity trends, threats, and best practices to continually enhance the organization’s cybersecurity posture.
• Vendor Management: Evaluate and manage third-party vendors to ensure they adhere to the organization’s cybersecurity standards.
• Reporting: Prepare and present regular reports on the organization's cybersecurity status to senior management and other stakeholders.
• Security Audits: assist in security audits and vulnerability assessments to verify the effectiveness of security measures and identify areas for improvement.
• Risk Mitigation: Develop and implement strategies to mitigate identified cybersecurity risks and prevent data breaches.

What are we looking for?

• Bachelor’s degree or equivalent in Computer Science
• Ability to conduct risk assessments and analyse potential threats and vulnerabilities specific to environments. Skill in developing risk mitigation strategies and prioritizing security controls to address identified risks.
• Expertise in understanding secure architectures, including network segmentation, secure communication channels, and access controls for critical assets. Ability to integrate security controls into existing infrastructure.
• Strong knowledge of network security principles and techniques, including firewalls, intrusion detection and prevention systems (IDPS), virtual private networks (VPNs), and secure remote access. Understanding how to apply these concepts to OT networks.
• Knowledge of machine learning and artificial intelligence applications in security
• Strong knowledge of security frameworks and standards (e.g., NIST, CIS, ISO 27001
• Self-motivated and results focused; ability to strengthen the team and its mission.
• Excellent communication and interpersonal skills to collaborate with technical and non-technical stakeholders
• Ability to think critically and solve complex problems, and make data-driven decisions

BENEFICIAL

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Scaled Agile Framework (SAFe 5 or higher)

WE ARE REYNOLDS AMERICAN—A member of the BRITISH AMERICAN TOBACCO GROUP

At Reynolds American, we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. See what is possible for you at REYNOLDS AMERICAN.

BELONGING, ACHIEVING, TOGETHER

Collaboration and teamwork underpin everything we do here at Reynolds American. We know that collaborating with colleagues is what makes us stronger and best prepared to meet our business goals.

SALARY AND BENEFITS OVERVIEW

Benefit Information

The following is a general summary of the competitive compensation and benefit plans we offer:

• 401(k) plan that offers opportunity to save on pre- and post-tax basis up to 50 percent of eligible compensation.
  • Company matches 100 percent of employee pre-tax/Roth (401k) contributions up to six percent
  • Company contributes an additional three percent to 401(k) whether employee participates or not
• Comprehensive health- and welfare-benefits package (including medical, dental, vision, and prescription drugs)
• Health Savings Account start-up contribution for employees who elect the high deductible health plan
• Flexible spending accounts for both Health Care and Dependent Care allowing employee to use pre-tax dollars to pay for qualified expenses during the calendar year
• Employee assistance program offering 8 free counselling sessions, per issue, each calendar year for employees and their dependents
• Company paid life insurance of 1x annual base pay ($50,000 minimum)
• Company paid accidental death or dismemberment insurance of 2x annual base pay ($50,000 minimum)
• Voluntary insurances offered at group rates: employee and dependent life insurance, AD&D insurance, critical illness, accident coverage, disability buy-up, and auto & home insurance
• Tuition reimbursement and student loan support
• Dependent Scholarship Programs
• Free confidential personal financial counselling service
• On-site health centers and 24/7 fitness centers at certain company locations
• A charitable giving matching grants program that enables employees to direct and double their donations to qualifying charitable organizations of their choice
• Health-care concierge service
• Volunteer service opportunities
• Extensive training opportunities
• Company vehicle for eligible employees
• Mobile phone allowance for eligible employees
• Paid Leave:
  • Sick and Personal Time (exempt employees may be excused with pay for brief absences; non-exempt employees receive up to 6 days)
  • Vacation (levels Below Senior Director receive 15 days (pro-rated during first year of service); Senior Director and Officers receive 25 days (pro-rated during first year of service)).
  • Holidays (Nine company recognized and two annual personal holidays to be used at the employee’s discretion)
  • Paid Parental Leave + temporary reduced work schedule opportunity
  • Funeral Leave
  • Short-Term Disability Leave
  • Long-Term Disability Leave
  • Jury Duty Leave
  • Military Leave
  • Released Time for Children’s Education
  • Community Outreach Leave
  • Other paid leave benefits, as required by state or local law

• Your journey with us is not limited by boundaries; it is propelled by your aspirations. Join us at Reynolds American and become a part of an environment that thrives on internal advancement, where your career progression is not just a statement – it is a reality, we are eager to build together. Seize the opportunity and own your development; your next chapter starts here.
• You will have access to online learning platforms and personalized growth programs to nurture your leadership skills.
• We prioritize continuous improvement within a transformative environment, preparing for ongoing changes.

Reynolds American Inc. and its affiliated companies is an Equal Opportunity Employer.All qualified applicants will receive consideration for employment without regard to age, race, color, religion,sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or any other status protected by law. Only applicants requiring reasonable accommodation for any part of the application and hiring process should contact us directly via email at [e-mail]

California Privacy Notice

#LI-Hybrid