Your Key Responsibilities
As a Cyber Risk Manager, you will be part of the team to assess, design, build, implement and manage
security solutions for our clients and support the clients in their desire to protect the business. You will
belong to an international connected team of specialists helping our clients with their most complex
information security needs and contributing toward their business resilience.
Skills and Attributes for Success
- Experience in delivering multiple security projects and solutions across one or more of the following domains: Information Security domains: Cyber Program Management, Cyber Threat Management, Identity & Access Management, Data Protection, Privacy, Security Operations, and Cyber Analytics. (This experience should include both advisory, implementation, and operation experience)
- Conduct cyber risk assessments in support of technology initiatives to help identify IT-related risks and determine appropriate controls to mitigate those risks.
- Monitor, track, and manage risk mitigations and exceptions, ensuring adequate monitoring capability is incorporated into solutions.
- Understand security concepts and how they apply to business and technology solutions
- Be able to articulate threats and risks to business and technology leaders
- Understand project management concepts and how they can be applied to security-related projects
- Strong technical security skills in assessment, design, implementation, architecture, and program/project delivery and work across various delivery models (Waterfall, Agile, DevOps)
To Qualify for the role, you must have:
- A recognized university degree in Computer Science, Computer/Electrical Engineering, Information Technology, or equivalent
- At least 6 years of relevant experience, preferably with 2 years experience in a business consulting role in a leading consultancy firm
- Mandatory skills: Threat Modelling and Cloud Technical Risk Assessment knowledge
- Strong interest in the field of information security
- Creative, independent with good problem-solving skills
- Excellent communicator with strong analytical, interpersonal, and writing skills
Ideally, you'll also have:
- Industry-related certification preferred (e.g., CISA, CISM, SABSA, PRINCE2, TOGAF, ITIL)
- Solution Level Certifications, OSCP, CREST, GIAC would be advantageous, as well as penetration testing experience
- Solution design of Threat & Vulnerability Management solutions such as implementation of SIEM (e.g., ArcSight), Incident Response (e.g., Resilient), & Security Analytics (e.g., RSA Security Analytics) within the context of a Security Operating Centre framework
- Familiarity with at least one of the following IAM technologies such as SailPoint, RSA Aveksa / VIA & Oracle (OIM, OIA)
- Possess a CISSP certification
