Cyber Security & Technology Risk Senior Manager

• Develop and execute the Group’s cyber security strategy, roadmap, policies and standards;
• Lead cyber security architecture reviews and ensure security requirements are embedded in technology projects;
• Oversee SOC, SIEM, EDR, threat monitoring and cyber incident response;
• Establish vulnerability management, penetration testing and remediation governance;
• Maintain the Technology Risk Register and coordinate risk assessments across IT, cloud, data, AI, OT and third parties;
• Define and oversee ITGC, cyber security controls, risk acceptance and security exception processes;
• Coordinate technology audits, compliance reviews and remediation of audit and security findings;
• Define governance requirements for IAM, PAM, access reviews and segregation of duties;
• Oversee third-party technology and cyber security risk assessments;
• Establish governance for business continuity, disaster recovery and cyber resilience;
• Define security requirements for factories, farms, OT, PLC, SCADA, IoT and edge devices;
• Manage SOC, MSSP, cyber security vendors and related service performance;
• Lead and develop the Cyber Security and Technology Risk team.

Qualification and Experience:

• Bachelor’s degree in Information Technology, Cyber Security, Computer Science or a related field;
• Preferred Certifications CISSP, CISM, CISA, CRISC, ISO 27001 or CCSP are preferred;
• At least 8 years of experience in Cyber Security, Technology Risk, IT GRC, IT Audit or related areas;
• At least 3 years of team or program leadership experience;
• Practical experience in several of the following areas;
• Cyber security governance and strategy;
• SOC, SIEM, EDR and incident response;
• Vulnerability management;
• IAM and PAM;
• ITGC, technology risk and compliance;
• e.Cloud, application or data securit
• Business continuity and disaster recovery;
• Third-party technology risk;
• Familiarity with frameworks such as ISO 27001, NIST CSF, CIS Controls or COBIT;
• Experience in manufacturing, agriculture, food, logistics or OT environments is an advantage.

 

Competencies

• Strong understanding of cyber security and technology risk;
• Ability to translate technical risks into business impact;
• Strong stakeholder, vendor and team management skills;
• Practical and risk-based decision-making;
• Strong communication, influencing and incident leadership capabilities;
• High integrity, ownership and accountability.