Risk Manager

Key Responsibilities:

Risk Management & Governance:

• Understand applicable regulations, guidelines, and industry best practices (e.g., NIST, ISO, OWASP, ITIL) to manage risk and ensure compliance.
• Develop, maintain, and audit security documentation such as policies, standards, and procedures.
• Monitor internal security controls for EDR, email security, server security, and cloud security.
• Conduct internal security assessments to ensure continued compliance.
• Explain risk management roles across teams and secure buy-in for improving organizational security posture.
• Manage SOC 2 Type 2 assessments and collect evidence for relevant controls.
• Review RFPs for cybersecurity-related responses.
• Manage cybersecurity dashboards, reports, and board meeting MOMs.
• Evaluate vendors for cybersecurity controls and review firewall rules for on-premises and AWS.

Cloud & Infrastructure Security:

• Implement and manage AWS Cloud security and Office 365 security.
• Manage SOC, incident response, and business continuity activities.
• Support internal and external audits and follow up until closure on audit findings.

Security Awareness & Training:

• Create security awareness materials (PPTs, emailers) and conduct training as needed.
• Develop CISO dashboards and success reports.
• Engage with business teams to understand cybersecurity requirements.