Manager - Cyber Consulting Services (CPX) (CPX)

The Manager \u2013 GRC Services (Risk Management) is responsible for the day-to-day delivery of risk management advisory engagements, leading engagement teams to design, implement and enhance enterprise and operational risk frameworks for clients. Reporting to the Director \u2013 GRC Services, the role combines hands-on technical delivery with team leadership, client relationship management and support to business development, ensuring engagements are delivered to a high standard, on time and within budget. \u2022 Lead the assessment, design and implementation of operational, strategic, financial and emerging-risk frameworks aligned to ISO 31000, COSO ERM and relevant regulatory expectations.\u00A0Plan, manage and deliver risk management engagements, including enterprise risk management (ERM) framework design, risk appetite and tolerance setting, risk and control self-assessments, key risk indicators and risk reporting \u2022 Develop risk registers, heat maps, risk appetite statements, policies, procedures and governance structures tailored to client needs.\u00A0 \u2022 Manage engagement scope, timelines, budgets, deliverables and quality, escalating issues to the Director as needed. \u2022 Act as a primary day-to-day client contact, building strong working relationships with risk, audit and operational stakeholders. \u2022 Present findings, recommendations and deliverables clearly to management and, where appropriate, board and committee audiences. \u2022Lead, coach and review the work of consultants and analysts, providing direction, feedback and on-the-job development. \u2022 Manage resourcing and workload allocation across concurrent engagements \u2022 Support proposal development, scoping and pricing for risk management opportunities. \u2022 Identify follow-on and cross-service opportunities within existing accounts. \u2022 Strong risk-management technical skills across ERM, operational and emerging risk. \u2022 Project and engagement management, including scope, budget and quality control. \u2022 Client relationship management and clear written and verbal communication. \u2022 Team leadership and coaching skills. \u2022 GRC and risk management platforms (e.g. ServiceNow GRC, RSA Archer or equivalent). \u2022 Reporting and BI tools (e.g. Power BI, Tableau) and advanced Excel for risk analytics and dashboards. \u2022 Risk register, heat-map and KRI/KPI tooling. \u2022 Microsoft 365 or equivalent productivity and collaboration suites. \u2022 Minimum 7 years of relevant risk-management experience, including experience in a consulting or advisory environment. \u2022 Minimum 2 years managing engagement and teams end to end. \u2022 Demonstrated experience designing or implementing ERM frameworks, risk appetite and control assessments. \u2022 Experience supporting national / sector-wide cyber risk and maturity programmes \u2014 such as the National Cybersecurity Index Program \u2014 including cyber risk scoring, maturity assessment and KRI/KPI design, is strongly preferred. \u2022 Bachelor\u2019s degree in Computer Science, Information Technology, Cybersecurity, or a related field. \u2022 Master\u2019s degree preferred. The Manager \u2013 GRC Services (Risk Management) is responsible for the day-to-day delivery of risk management advisory engagements, leading engagement teams to design, implement and enhance enterprise and operational risk frameworks for clients. Reporting to the Director \u2013 GRC Services, the role combines hands-on technical delivery with team leadership, client relationship management and support to business development, ensuring engagements are delivered to a high standard, on time and within budget. \u2022 Lead the assessment, design and implementation of operational, strategic, financial and emerging-risk frameworks aligned to ISO 31000, COSO ERM and relevant regulatory expectations.\u00A0Plan, manage and deliver risk management engagements, including enterprise risk management (ERM) framework design, risk appetite and tolerance setting, risk and control self-assessments, key risk indicators and risk reporting \u2022 Develop risk registers, heat maps, risk appetite statements, policies, procedures and governance structures tailored to client needs.\u00A0 \u2022 Manage engagement scope, timelines, budgets, deliverables and quality, escalating issues to the Director as needed. \u2022 Act as a primary day-to-day client contact, building strong working relationships with risk, audit and operational stakeholders. \u2022 Present findings, recommendations and deliverables clearly to management and, where appropriate, board and committee audiences. \u2022Lead, coach and review the work of consultants and analysts, providing direction, feedback and on-the-job development. \u2022 Manage resourcing and workload allocation across concurrent engagements \u2022 Support proposal development, scoping and pricing for risk management opportunities. \u2022 Identify follow-on and cross-service oppo

Minimum 7 years of relevant risk-management experience, including experience in a consulting or advisory environment. Minimum 2 years managing engagement and teams end to end. Demonstrated experience designing or implementing ERM frameworks, risk appetite and control assessments. Experience supporting national / sector-wide cyber risk and maturity programmes — such as the National Cybersecurity Index Program — including cyber risk scoring, maturity assessment and KRI/KPI design, is strongly preferred. Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master’s degree preferred.

Lead the assessment, design and implementation of operational, strategic, financial and emerging-risk frameworks aligned to ISO 31000, COSO ERM and relevant regulatory expectations. Plan, manage and deliver risk management engagements, including enterprise risk management (ERM) framework design, risk appetite and tolerance setting, risk and control self-assessments, key risk indicators and risk reporting. Develop risk registers, heat maps, risk appetite statements, policies, procedures and governance structures tailored to client needs. Manage engagement scope, timelines, budgets, deliverables and quality, escalating issues to the Director as needed. Act as a primary day-to-day client contact, building strong working relationships with risk, audit and operational stakeholders. Present findings, recommendations and deliverables clearly to management and, where appropriate, board and committee audiences. Lead, coach and review the work of consultants and analysts, providing direction, feedback and on-the-job development. Manage resourcing and workload allocation across concurrent engagements. Support proposal development, scoping and pricing for risk management opportunities. Identify follow-on and cross-service opportunities within existing accounts.