Senior Manager - Cybersecurity Risk & Assurance (Cluster CISO)

Position Overview

The Cybersecurity Risk Manager performs an assessment of cyber risks associated with technology initiatives and provides recommendations on control requirements by risk, policy, and standards. The potential candidate will:

• Be familiar with cybersecurity policies, standards, protocols, and frameworks, and the organization's regulatory compliance requirements for cybersecurity. He/she also has expertise in cyber risk mitigation strategies
• Understands the organization's risk appetite and ensures risks are within acceptable levels for the management endorsement of technology initiatives
• Have a sharp, analytical mind and is able to anticipate problems and risks to mitigate them ahead of time. He/she is an excellent communicator who works well with others and promotes a cooperative working environment and relationships within and beyond his/her team

Role & Responsibilities

• Drive the development of HealthTech Instruction Manual (“HIM”) policies and sub-policies for adoption by Cluster
• Manage the HIM policies and sub-policies compliance risk for Cluster
• Manage the operations of Cluster IT/IT-Security Risk Management Committee and Working Groups
• Manage the HIM policies and sub-policies risk deviation process for Cluster
• Manage the Cluster risk profile and maintain the Group risk register for ICT and Cybersecurity risks
• Develop and drive regular monitoring and reporting of key risk indicators
• Manage regular risk reporting and risk escalation to Cluster Senior Management or Cluster risk forums
• Perform thematic reviews to ensure compliance with HIM policies, provide actionable, recommendations, and engage stakeholders for implementation
• Provide timely communication to stakeholders on HIM policies and sub-policies for implementation
• Provide advisory to stakeholders on HIM policies and sub-policies requirement
• Conduct briefings and trainings on Cluster's risk management process to stakeholders.

Requirements

• More than 8 years of experience in information/cybersecurity and risk management
• Experience in leading cybersecurity risk assessment and risk reduction initiatives
• Experience in IT/IT-Security policy development and implementation
• Experience in driving IT-security thematic assessment and IT audits
• Good knowledge and experience with handling IT-security and cybersecurity audits
• Good knowledge of experience in driving compliance to meet cybersecurity regulatory requirements
• Good problem analysis and resolution skills
• Good and experience stakeholder management skills
• Good influencing skills within the team, department and across departments
• Ability to contribute through others, collaborate well across seniority, cultures and locations
• Good written and communication skills with ability to interact and engage with stakeholders and all levels of management
• Proactive and consistently show initiative, solution-oriented

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!

#LI-SYNX13