Senior Cyber Security Risk Manager

The Senior Cyber Security Risk Manager plans and implements organisation-wide processes and procedures for the management of risk. They monitor the efficiency and effectiveness of the risk management processes across the organisation and make recommendations for continuous improvement.

As a
Senior Cyber Security Risk Manager , your main day to day responsibilities will be:

• Developing risk management-related policy and assuring the ongoing appropriateness of policy in accordance with regulation and wider organisational and government policies.
• Supporting the embedding of risk management systems, processes, and frameworks, communicating these across the business to a range of stakeholders.
• Working within established security and risk management governance structures, usually under supervision to support, review and undertake risk management activities such as: undertaking cyber security related risk assessments; threat assessments and other risk management activities.
• Communicating the risk assessment outcomes to stakeholders in ways that support effective security, risk management and decision-making.
• Providing advice to address straight-forward cyber security risks by applying a variety of security capabilities, which may include using published guidance or standards, and validating the effectiveness of risk mitigation measures.
• Helping risk or service owners to make decisions that are well informed by providing clear security advice, including contributing to reports or working within established reporting chains in a security team.
• Providing risk-oriented training to a range of stakeholders, including preparation of training materials, to ensure that relevant stakeholders are equipped to use standard risk management frameworks.

You’ll have a demonstrable experience in, and passion for, Cyber Security including the following skills or experience in:

• Reviewing and performing risk assessments, developing risk treatment plans and communicating those risks to others.
• Identifying typical risk indicators and explaining prevention measures.
• Adopting a structured approach to executing and documenting audits, following agreed standards.
• Maintaining integrity of records to support and satisfy audit trails.
• Ability to champion cyber security risk and ensure ongoing appropriateness or practices.
• Communicating technical requirements effectively to both technical and non technical stakeholders.