- Contribute in the maturity of the cyber risk management strategy and the cyber security framework delivery and adherence, in alignment with the governance direction
- Manage cyber risk and the cyber risk framework. Monitor and measure control effectiveness aligned with strategic direction
- Drive the definition and implementation of an appropriate Threat Intelligence process, alongside IT Security
- Provide technical advisory to the business for all Cyber Security related matters.
- Oversee the 3rd party risk due diligence responses
- Provide Cyber Security oversight for internal and external audits. Represent Travelex for SME expertise to regulators and customers.
- Adapt security landscape aligning to industry expectations.
- Interact with Information Governance and Data Privacy to ensure alignment with information management board expectations.
- Assist in maturing the Cyber risk and technology risk landscape.
- Create transparent and relatable risk statements and communicate risk effectively with all levels of management
- Manage penetration tests and schedules
Management Responsibilities
- Support the functional management of the Cyber Risk Management team.
- Provide employee mentoring guidance to the Cyber Risk analysts
- Support in the implementation, growth and management of insider threat
Relationship Management
- Operate as a Business Information Security Partner, supporting the business units and Geos in all technology changes and strategies
- Develop and maintain robust relationships with key business stakeholders to ensure assurance analysis is visible and in line with agreed customer expectations.
- Raise awareness and profile of cyber risk and architecture across the business at all levels.
Communication
- Writes and speaks fluently on all aspects of work and communicates effectively with all levels of management.
- Responsible for pro-active and regular communication and partnering with IT and the business in relation to technical risk management.
- Actively communicate and seek feedback from colleagues and customers.
- Perform leadership updates in team briefs.
- Ensure feedback to line manager outlining general activities of role.
Experience and Skillsets required:
- Significant experience of Cyber Security in a global organisation, in information technology & related fields. (6 – 8 years, Big4 or strong technical background)
- Familiarity with ISO27001 / PCI-DSS / DORA / NIST CSF / CIS Controls and related global standards / regulation.
- Experience of implementing and managing risk methodologies and processes.
- Technical cyber security background
- Possess effective analytical planning and organisational skills.
- Demonstrate a proven ability to deliver with a high level of quality focus.
- Ability to communicate effectively at all levels and to influence key stakeholders.
- Have a professional approach with a confident assertive style
- Build & maintain strong relationships with peers and colleagues