Senior Manager (Information Technology Risk Management)
Core
Lead governance of cybersecurity risk matters, provide security advisories, oversee regulatory compliance, and manage security incidents for an insurance subsidiary.
Role type
Senior Manager, Information Technology Risk Management
Builds
IT risk control frameworks and security strategies for an insurance company
Domain
Insurance / Financial Services / Cybersecurity
Deliverable
dashboards & analysis
Required skills
Cybersecurity risk governance, Cloud security, Application security, Security policy management, Incident management, Regulatory compliance, Risk assessment, Penetration testing oversight, Threat intelligence, Secure deployment methodologies
Preferred skills
CISSP, CISA, OSCP, CEH, ISO 27001, NIST certifications
Technologies
Cloud environments, Security tools for assessment and testing
Responsibilities
Assist in governance of cybersecurity risk matters for presentation to risk committees and the Board; Provide professional security advisories and recommendations for IT solutions; Oversee implementation of new cybersecurity regulations; Conduct security and cloud risk assessments; Maintain security risk register; Collaborate on security assessments and oversee penetration testing; Manage and provide advice for IT security incidents; Review and update security policies and operational processes.
Seniority
Senior, Management