Cybersecurity Risk Manager Job

Job Purpose

Design and manage the adoption of cybersecurity controls, policies, and processes throughout RCU. To identify, assess, and prioritize cybersecurity risks and third parties risks across RCU, and then lead remediation or mitigation to acceptable levels

Key Accountabilities

Functional Responsibilities

Oversee the development and maintenance of the cybersecurity risk management framework, including methodologies, roles, and responsibilities.

Manage the identification, assessment, and monitoring of key cyber risks and their impact across the organization, maintaining a comprehensive risk register.

Lead the planning and execution of both planned and on-demand risk assessments, ensuring thorough evaluation of potential threats.

Develop and implement processes for cybersecurity risk reporting and remediation, providing timely updates to relevant stakeholders.

Oversee the development and execution of organizational threat profiling and landscape development to identify and mitigate potential threats.

Manage the third-party and supply chain risk management framework, including the definition of roles and responsibilities, criticality scoring, and categorization.

Oversee the lifecycle management of third-party risks, from evaluation and classification to on-boarding and off-boarding.

Review and update cybersecurity requirements within contracts and agreements with third parties to ensure compliance and risk mitigation.