The Information Security Risk Manager will be responsible for identifying, assessing, and mitigating information security risks within the organization. This role involves developing and implementing risk management strategies, ensuring compliance with security policies, and promoting a culture of security awareness.
Responsibilities
- Identify and assess information security risks across the organization.
- Develop and implement risk management strategies and frameworks.
- Monitor and review security policies and procedures to ensure compliance.
- Collaborate with IT and other departments to address security vulnerabilities.
- Conduct risk assessments and prepare reports for management.
- Provide training and awareness programs on information security best practices.
- Stay updated with the latest security trends and regulations.
Skills and Qualifications
- 3-6 years of experience in information security or risk management.
- Solid understanding of information security frameworks such as ISO 27001, NIST, or CIS.
- Experience with risk assessment methodologies and tools.
- Proficient in security technologies such as firewalls, intrusion detection systems, and encryption.
- Familiarity with regulatory requirements such as GDPR, PCI-DSS, or HIPAA.
- Excellent analytical and problem-solving skills.
- Strong communication and interpersonal skills to collaborate with various teams.