Cyber Security Manager - Audit & Risk Management

You will be responsible for managing Information Security Projects, Audits, assessments, and other related activities. This includes performing Technology Risk Assessments for processes and technologies, as well as developing and reviewing Information Security (IS) standards and guidelines for new technologies. You will conduct periodic audits and assessments as per the Infosec calendar. Your role will involve setting IS Standards, Checklists, and Guidelines such as IS guidelines and any supporting templates, Standards for Technology Risk Assessments (TRA), and managing internal/third-party Ethical hacking/Vulnerability Assessment/Penetration Testing, Red Team assessment activities. You will create methodologies/checklists for performing TRA and establish approval matrices based on the results. Additionally, you will be responsible for BCP/DR standards, Application security, Vendor risk assessment standards, IS-related training standards, and Security testing baselines. You will liaise with business teams to define roles within each application based on business requirements and review training/skill set requirements for the SOC/LAM/DLP teams. Your tasks will include performing daily InfoSec operational activities like FnF Clearance, approvals, and conducting or participating in Cyber security drills as required. You will monitor and manage Information/Cyber Security Incidents, assign detailed responsibilities and action steps during cyber crises, and identify active risks and threat vectors related to cyber crises. Moreover, you will support response and investigation activities during cyber crises, review regulatory impact and compliance obligations, and handle any other tasks, activities, or projects delegated by the Chief Risk Officer (CRO) or Chief Information Security Officer (CISO).,