Cyber Security Risk Manager

The role holder is responsible for maintaining the risk register, identifying cybersecurity risks, and ensuring mitigation plans. They will oversee risk treatment, evaluate threats and controls, develop threat models, and ensure disaster recovery and business continuity plans include cybersecurity.

Responsibilities

• Maintain risk register and ensure identification of cybersecurity risks.
• Review risk register and ensure an appropriate mitigation plan is in place.
• Ensure risk treatment plans are implemented in alignment with approved plans.
• Evaluate business impacts of sensitive or critical information associated with target environments.
• Evaluate threats and related risks to target environments and oversee collection of information on business applications to identify risks.
• Develop and maintain Threat Modeling and associated risk scenarios.
• Ensure Cyber Resilience team updates the framework according to attacks and aligns with framework guidelines.
• Oversee CS Resilience trainings and support in their development.
• Prepare a test plan and perform tests and verification against detailed applications & infrastructure CS BC/DR requirements in alignment with GD Risk.
• Evaluate CS systems operations performance and perform the required technical assessments to capture any potential security risks.

Requirements

• A minimum of 8 years of related experience in leading the Cyber Security function for a large organization, preferably within the telecom industry.
• Bachelor Degree in Computer Science or Information Technology.
• Additional education certifications are a plus.