Technical Cyber Risk Manager

Key Accountabilities :

Cyber Risk management

- Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction

- Manage cyber risk and the cyber risk framework .   Monitor and measure control effectiveness aligned with strategic direction

- Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security

- Provide technical advisory to the business for all Cyber Security related matters.

- Oversee the 3rd party risk due diligence responses

- Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.

- Adapt security landscape aligning to industry expectations.

- Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.

- Assist in maturing the Cyber risk and technology risk landscape.

- Create clear and relatable risk statements and communicate risk effectively with all levels of management

- Manage penetration tests and schedules

Management Responsibilities

- Support the functional management of the Cyber Risk Management team.

- Provide employee mentoring guidance to the Cyber Risk analysts

- Support in the implementation, growth and management of insider threat

Relationship Management

- Operate as a Business Information Security Partner , supporting the business units and Geos in all technology changes and strategies

- Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.

- Raise awareness and profile of cyber risk and architecture across the business at all levels.

Communication

- Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.

- Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management .

- Actively communicate and seek feedback from colleagues and customers.

- Perform leadership updates in t eam b riefs.

- Ensure feedback to line manager outlining general activities of role.

Experience and Skillsets required :

- Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)

- Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.

- Experience of implementing and managing r isk methodologies and processes .

- Technical cyber security background

- Possess effective analytical planning and organisational skills.

- Demonstrate a proven ability to deliver with a high level of quality focus.

- Ability to communicate effectively at all levels and to influence key stakeholders.

- Have a professional approach with a confident assertive style

- Build & maintain strong relationships with peers and colleagues

- Certification such as CISSP, CISM, CEH, etc.