Cybersecurity Risk and Compliance Manager

The Cybersecurity Risk and Compliance Manager is a key role in ASSA ABLOYs strategy to accelerate the organization’s cyber resilience. The newly created position will report to ASSA ABLOY America’s Division CISO and will be accountable for the divisional Cyber Risk and Compliance program. The role will build strong alliances with all functions and sub-groups across the division to help in the process of identifying, analyzing, quantifying, and treating risks. In addition, this role will be responsible to define, measure, and report on Information security compliance within the operation of an ISMS, providing relevant KPIs and KRIs. Establish divisional cyber risk governance Build divisional risk management culture and methodologies Maintain divisional cyber risk register Establish and execute risk assessment and management with business functions Build and maintain Cyber Risk and Compliance Reporting dashboards and reports for stakeholder groups Definition, monitoring and reporting of Key Risk indicators and relevant Key performance indicators Create, modify and implement divisional policies and directives based on Information security standards ISO27001 and NIST Develop deep coalitions with business partners to anchor Information Security into Policy framework Collaborate with corporate counsels and HR departments to monitor enforcement of standards and regulations Review policies periodically to identify hidden risks or non-conformity issues Develop and oversee control systems to prevent or deal with violations of legal guidelines and internal policies Evaluate the efficiency of controls and improve them continuously. Requirements Professional certification in Information Security CISM or

CISSP

Professional certification in CRISC or ISO27005 preferred Minimum 3 years of experience in a global cyber security management role Proven experience of implementing and operating information security risk and compliance management within an environment of similar size and global representation Strong knowledge of current digital service delivery concepts, technology, and its cyber protection capabilities Good enterprise business knowledge with the ability to articulate risks in clear business language Good knowledge of global regulatory compliance demands in the areas of privacy, industry or governmental segments. (GDPR, CCPA, PCI-DSS, critical infrastructure, Patriot Act…) Engaged, committed, creative, hands-on and self-motivated personality Expert knowledge and proven success in implementing Information Security Management System (ISMS) in an enterprise organization Analytical and conceptual ability to identify compliance risks and develop practical solutions and adjustments Excellent business and IT communication skills in the English language. Core Competencies Demonstrates expertise in Cyber Risk and Compliance Management, with a strong focus on implementing Information Security Management Systems (ISMS) and ensuring compliance with global regulatory standards. Capable of building risk management cultures and effectively communicating risks in business language. Highest-signal resume keywords CISM Certification CISSP Certification ISMS Implementation Cyber Risk Governance Regulatory Compliance Knowledge ATS Optimization Keywords Hard Skills Information Security Management Risk Assessment Compliance Management KPI Development Risk Register Maintenance Policy Development Control System Evaluation Analytical Problem Solving Digital Service Delivery Concepts Cyber Protection Capabilities Soft Skills Engaged Personality Creative Thinking Self-Motivation Effective Communication Certifications & Qualifications CISM CISSP

CRISC

ISO27005

Industry Keywords GDPR CCPA

PCI-DSS

Critical Infrastructure Patriot Act Tools & Technologies Risk Management Dashboards Compliance Reporting Tools #J-18808-Ljbffr Jobtailor