About the role
Key Responsibilities
- Lead the Cyber Risk Management domain through cross-functional and matrix-based collaboration, without direct people management responsibilities.
- Provide professional guidance and subject matter expertise to cybersecurity risk specialists and stakeholders across the organization.
- Drive the organization's cyber risk management strategy, framework, and methodology.
- Lead cross-functional cyber risk initiatives, ensuring alignment between business, technology, and cybersecurity stakeholders.
Requirements
- At least 5 years of experience experience in leading cross-functional cybersecurity initiatives and providing professional guidance in a matrix organizational structure.
- Strong ability to influence stakeholders, drive collaboration, and lead complex processes without direct managerial authority.
- Demonstrated ability to coordinate cybersecurity experts and multidisciplinary teams across the organization.
- In-depth understanding of cybersecurity architecture, application security, infrastructure, cloud security, and identity management.
- Experience reviewing technology architectures and analyzing security risks in complex systems.
- Strong knowledge of leading risk management frameworks and standards, including NIST, ISO 27001, and FAIR.
- Experience leading risk monitoring and control processes, including tracking remediation plans and information security findings.
- Proven ability to present risk assessments, risk exposure, and actionable insights to senior management.
- Strong ability to lead cross-functional initiatives and influence stakeholders without direct authority.
- Experience working with regulatory bodies and internal and external auditors.
- Advantages
- Familiarity with Threat Modeling methodologies and technical risk analysis.
- Knowledge of cloud environments (AWS, Azure, GCP) and modern technology architectures.
- Professional certifications such as CISSP, CISM, or CRISC.