Technical Cyber Risk Manager

About this role

Key Accountabilities:

Cyber Risk management

• Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction
• Manage cyber risk and the cyber risk framework.  Monitor and measure control effectiveness aligned with strategic direction
• Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security
• Provide technical advisory to the business for all Cyber Security related matters.
• Oversee the 3rd party risk due diligence responses
• Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.
• Adapt security landscape aligning to industry expectations.
• Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.
• Assist in maturing the Cyber risk and technology risk landscape.
• Create clear and relatable risk statements and communicate risk effectively with all levels of management
• Manage penetration tests and schedules

Management Responsibilities

• Support the functional management of the Cyber Risk Management team.
• Provide employee mentoring guidance to the Cyber Risk analysts
• Support in the implementation, growth and management of insider threat
• Relationship Management
• Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies
• Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.
• Raise awareness and profile of cyber risk and architecture across the business at all levels.
• Communication
• Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.
• Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management.
• Actively communicate and seek feedback from colleagues and customers.
• Perform leadership updates in team briefs.
• Ensure feedback to line manager outlining general activities of role.
• Experience and Skillsets required:
• Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)
• Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.
• Experience of implementing and managing risk methodologies and processes.
• Technical cyber security background
• Possess effective analytical planning and organisational skills.
• Demonstrate a proven ability to deliver with a high level of quality focus.
• Ability to communicate effectively at all levels and to influence key stakeholders.
• Have a professional approach with a confident assertive style
• Build & maintain strong relationships with peers and colleagues
• Certification such as CISSP, CISM, CEH, etc.