Role Purpose
Lead the development, implementation, and continuous enhancement of the organization’s cybersecurity risk management framework to ensure enterprise-wide identification, assessment, treatment, and monitoring of cyber risks. Oversee strategic risk governance, ensure compliance with national regulations and global standards, and provide executive-level guidance to support informed decision-making. Drive organizational alignment, influence senior stakeholders, and lead a team to strengthen the cybersecurity risk posture across internal functions, cloud environments, and third-party ecosystems.
Responsibilities
- Develop, maintain, and govern the organization’s cybersecurity risk management strategy, framework, and policies aligned with regulatory requirements (e.g., NCA), industry standards, and corporate goals.
- Establish enterprise-wide risk governance mechanisms, including risk committees, reporting structures, and escalation protocols.
- Define risk appetite and tolerance levels in collaboration with executive leadership.
- Oversee and guide complex, high-impact cybersecurity risk assessments covering systems, cloud services, emerging technologies, digital initiatives, and third-party relationships.
- Review and approve major assessment findings, treatment plans, and residual risk acceptances.
- Own and manage the enterprise cybersecurity risk register, ensuring risks are accurately identified, categorized, quantified, and regularly updated.
- Ensure risk assessments are performed consistently and accurately across all business units.
- Lead cross-functional reviews of risk treatment implementation, ensuring accountability with technology, business, and vendor stakeholders.
- Deliver periodic, executive-level cybersecurity risk posture reports and dashboards.
- Act as the primary senior point of contact for cybersecurity risk discussions with executives, regulators (e.g., NCA), audit entities, and external partners.
- Provide strategic guidance to business and technology leaders on cyber risk prioritization, investment decisions, and acceptable levels of exposure.
- Promote a risk-aware culture through leadership engagement, awareness, and structured communication.
- Continuously monitor emerging threats, vulnerabilities, technologies, and industry best practices, translating insights into actionable improvements within the risk management framework.
- Lead periodic maturity assessments and drive improvements in methodologies, tools, and practices.
Qualifications
- Minimum of eleven years’ work experience.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or any related discipline.
- Relevant professional certification preferred.
