Technical Cyber Risk Manager

Key Accountabilities:Cyber Risk management

• Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction

• Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction

• Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security

• Provide technical advisory to the business for all Cyber Security related matters.

• Oversee the 3rd party risk due diligence responses

• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.

• Adapt security landscape aligning to industry expectations.

• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.

• Assist in maturing the Cyber risk and technology risk landscape.

• Create clear and relatable risk statements and communicate risk effectively with all levels of management

• Manage penetration tests and schedules

Management Responsibilities

• Support the functional management of the Cyber Risk Management team.

• Provide employee mentoring guidance to the Cyber Risk analysts

• Support in the implementation, growth and management of insider threat

Relationship Management

• Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies

• Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.

• Raise awareness and profile of cyber risk and architecture across the business at all levels.

Communication

• Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.

• Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management.

• Actively communicate and seek feedback from colleagues and customers.

• Perform leadership updates in team briefs.

• Ensure feedback to line manager outlining general activities of role.

Experience and Skillsets required:

• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)

• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.

• Experience of implementing and managing risk methodologies and processes.

• Technical cyber security background

• Possess effective analytical planning and organisational skills.

• Demonstrate a proven ability to deliver with a high level of quality focus.

• Ability to communicate effectively at all levels and to influence key stakeholders.

• Have a professional approach with a confident assertive style

• Build & maintain strong relationships with peers and colleagues

• Certification such as CISSP, CISM, CEH, etc.