IT&Data Risk & CS Manager

Job Description:

• The Cyber Risk Manager is responsible for the continuous identification assessment monitoring reporting and mitigation of cyber risks across the organization
• The role ensures that cybersecurity risks are managed within the defined risk appetite security controls remain effective and regulatory and compliance requirements are met
• Working closely with IT Security Operations Technology Internal Control Audit Compliance and Business teams the role supports the protection of Danone s digital assets and contributes to maintaining a resilient cybersecurity posture

Key Responsibilities:

• Cyber Risk Governance
• Maintain and execute the Cyber Risk Management Framework and associated governance processes
• Manage and maintain the cyber risk register ensuring risks are documented assessed and regularly reviewed
• Support risk governance committees and cybersecurity steering forums
• Ensure cyber risks are aligned with Enterprise Risk Management ERM standards and methodologies
• Risk Assessment Monitoring
• Conduct cyber risk assessments for applications infrastructure cloud platforms projects and third party services
• Evaluate emerging threats vulnerabilities and risk exposures impacting business operations
• Track risk treatment plans and ensure timely remediation of identified risks
• Control Assurance Compliance
• Manage security risk exceptions and compensating control assessments
• Ensure alignment with cybersecurity frameworks standards and regulations e
• g
• ISO 27001 NIST CSF CIS Controls GDPR DORA NIS2
• Reporting Stakeholder Management
• Prepare regular cyber risk reports and dashboards for management and leadership teams
• Present cyber risk exposure remediation progress and risk trends to stakeholders
• Collaborate with Security Operations Infrastructure Application Data and Business teams to drive risk reduction initiatives
• Act as a trusted advisor on cyber risk related matters for business and technology stakeholders

Technical Requirements:

• Functional Technical Skills RN2
• 1 SK2
• 2
• Cyber Risk Management and Risk Assessment methodologies
• Strong understanding of Information Security and Cybersecurity principles
• Knowledge of Governance Risk and Compliance GRC processes
• Experience with cybersecurity frameworks and standards ISO 27001 NIST CIS Controls
• Basic understanding of cloud security infrastructure security application security and data protection concepts
• Experience in preparing and advising business on different mitigation strategies that would best fit the situation
• Experience managing risk registers KRIs KPIs and remediation tracking
• Strong reporting dashboarding and analytical skills
• Behavioral Competencies
• Strong stakeholder management and influencing skills
• Flexibility and ability to adjust approach frameworks and controls to specific business cases and risks
• Excellent communication and presentation capabilities
• Analytical and problem solving mindset
• Ability to prioritize and manage multiple risks and initiatives
• Collaboration and teamwork across global and multicultural environments
• High attention to detail and governance discipline
• Good to Have
• Functional Technical Skills
• Experience with NIS2 GDPR and other regulatory frameworks
• Knowledge of Third Party Risk Management TPRM
• Experience with cybersecurity risk management tools and GRC platforms e
• g
• ServiceNow GRC Archer
• Understanding of Security Operations Vulnerability Management and Incident Response processes
• Data analytics and reporting automation capabilities Power BI Tableau Excel advanced analytics

Preferred Skills:

Technology->Cloud Security->AWS - GRC,Technology->Cloud Security->GCP - GRC,Technology->Risk Management->Risk Management System