The Cyber Resilience Risk Advisory Manager will promote the implementation of Cybersecurity risk management and remediation activities undertaken. This would include participation in the execution of risk management process undertaken to ensure compliance with the company’s cybersecurity policies and standards.

You will be responsible to perform cybersecurity risk assessment of new and existing programs. These programs can be on premises or outsourced. The role includes but stretches well beyond IT risk and security, touching on aspects such as compliance, physical security, personnel security, incident management, business continuity and more. A further objective is to liaise with and provide relevant, timely, credible information and sound professional advice to senior management concerning the organization’s information risk profile and the status of information risk treatments.

You will also will work closely with management, other team members, and operation teams to ensure cybersecurity risks are identified and addressed to an acceptable level.

Responsibilities:

Organize, conduct and perform Cybersecurity risk assessment and gap analysis process.
Establish, review and verify the Cybersecurity reviews conducted on Systems
Communicate and assist Business Units to address identified cybersecurity risks to meet business local objectives.
Monitor compliance with the Cybersecurity Standards, Policy and Architecture.
Improve and promote the System Cybersecurity resiliency and related activities.
Deliver annual Cybersecurity security risk management awareness program to drive Cybersecurity risk management best practices/culture into the Business Units and Program Managers.
Prepare and/or coordinate Monthly/Quarterly Cybersecurity related Risk Meeting.
Perform all other Cybersecurity duties as assigned by the Management.

The ideal candidate should have/ be:

Bachelor Degree in Computer Science, Computer Engineering, Electrical Engineering or other relevant field of study
Minimum 5 to 8 years of experience as Information Security Risk Management
Advanced understanding in the following areas: Platform Security, Data Security, Network Security, Physical Security, Security Assessment Tools, Security Monitoring Tools.
Advanced understanding in the following areas: Security Governance Standards, Business Continuity Planning, Enterprise Risk Management, Computer Security Incident Response, and Security Compliance Audits.
Knowledge of various IT standards and practices such as:
- SANS Incident Management Process.
- PCIDSS
- ISMS
- OWASP