Technical Cyber Risk Manager

KeyAccountabilities: 

Cyber Risk management 

• Contributein the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction 

• Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction 

• Drive the definition and implementation ofan appropriate Threat Intelligence process, alongside IT Security 

• Provide technical advisory to the business for all Cyber Security related matters. 

• Oversee the 3rd party risk due diligence responses 

• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SMEexpertise to regulators and customers. 

• Adapt security landscape aligning to industry expectations. 

• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations. 

• Assist in maturing the Cyber risk and technology risk landscape. 

• Create clear and relatable risk statements and communicate risk effectively with all levels of management 

• Manage penetration tests and schedules 

Management Responsibilities 

• Support the functional management of the Cyber Risk Management team. 

• Provide employee mentoring guidance to the Cyber Risk analysts 

• Support in the implementation,growth and management of insider threat 

Relationship Management 

• Operate as a Business Information Security Partner,supportingthe business units and Geos in all technology changes and strategies 

• Develop andmaintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations. 

• Raise awareness and profile of cyber risk and architecture across the business at all levels. 

Communication  

• Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.  

• Responsible for pro-active and regular communication and partnering with IT and the business in relation totechnicalrisk management.  

• Actively communicate and seek feedback from colleagues and customers.  

• Perform leadership updates in teambriefs.  

• Ensure feedback to line manager outlining general activities of role.

Experience and Skillsetsrequired: 

• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background) 

• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation. 

• Experienceofimplementing and managing risk methodologiesand processes. 

• Technical cyber security background 

• Possess effective analytical planning and organisational skills. 

• Demonstrate a proven ability to deliver witha high level of quality focus. 

• Ability to communicate effectively at all levels and to influence key stakeholders. 

• Have a professional approach with a confident assertive style 

• Build &maintain strong relationships with peers and colleagues 

• Certification such as CISSP, CISM, CEH,etc.