Senior Manager, Cybersecurity Risk Management

Role Purpose Lead the development, implementation, and continuous enhancement of the organization’s cybersecurity risk management framework to ensure enterprise-wide identification, assessment, treatment, and monitoring of cyber risks. Oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance to support informed decision-making. Drive organizational alignment, influence senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems. Responsibilities • Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals. • Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols. • Define risk appetite and tolerance levels in collaboration with executive leadership. • Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships. • Review and approve major assessment findings, treatment plans, and residual risk acceptances. • Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated. • Ensure risk assessments are performed consistently and accurately across all business units. • Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders. • Deliver periodic, executive-level cybersecurity risk posture reports and dashboards. • Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners. • Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure. • Promote a risk-aware culture through leadership engagement, awareness, and structured communication. • Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework. • Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices. Qualifications • Minimum of eleven years’ work experience. • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or any related discipline. • Relevant professional certification preferred. Show more Show less