Senior Manager, Cyber Resilience

About the Role:

The Senior Manager of Cybersecurity Operational Resilience will spearhead our resilience and continuity initiatives. This role focuses on preparing for and responding to cyber and IT incidents with minimal impact. Responsibilities include overseeing business continuity, incident management, cybersecurity, risk management, and conducting risk-based exercises. The ideal candidate will possess strategic vision, extensive experience, and the ability to collaborate across various corporate functions.

What You'll Do:

• Strategic Leadership: Execute a strategic vision for global cyber and operational resilience, aligning with the company's cybersecurity, risk/resilience, and continuity strategies and business objectives, while adapting to diverse regional requirements.

• Program Development: Lead the design, implementation, and maintenance of a comprehensive operational risk and resilience program.

• Continuous Improvement: Ensure continuous enhancement of incident management plan, procedures, and controls. Develop incident/exercise After Action Reports (AARs) with risks and gaps identified as well as mitigation action items listed with remediation dates and points of contact. Develop measures and metrics on risks and gaps identified during exercises and real-world incidents to be tracked to closure.

• Business Impact Assessments: Conduct regular quantitative business impact and risk assessments to identify critical cyber and IT business and operational processes, supporting systems/applications along with corresponding gaps and implement corrective actions.

• Global Awareness: Stay informed about emerging global security, geo-political, and regional/strategic risks, assessing their impact on the company's operations and develop risk mitigation strategies.

• Emergent Risk Management: Develop a living global emergent risk assessment to stay ahead of the ever-changing threat / risk landscape.

• Incident Management and Response: Develop and manage incident response and recovery plans, ensuring readiness and effective execution when any type of security incidents occur. Facilitate and manage major cyber/IT incidents from start to closure coordinating the wider corporate team and stakeholders for efficient and effective response.

• Cross-Functional Leadership and Collaboration: Work with IT, legal, Communications, and other corporate functions and business units to build and facilitate a Corporate Incident Management Team to support cyber and IT incident management and response as well as emergent risk profiles.

• Exercises and War Gaming: Build and facilitate cyber, IT, and operational risk-based tabletop exercises, functional exercises, and missile drills to test and train all incident management and response teams to enhance preparedness, identify gaps in plans and protocols, and enhance the cohesiveness and effectiveness of these teams.

• Stakeholder Communication: Serve as the primary point of contact for emergent risk and operational resilience matters, communicating status, risks, and recommendations to senior leadership and the board of directors.

• Industry Engagement: Engage with international risk and incident response groups to stay ahead of global threat and risk trends.

• Market Differentiation: Develop strategies to leverage a robust operational risk and resilience program as a competitive advantage.

• Customer Interaction: Collaborate with sales and marketing teams to articulate the value of emergent risk and operational resilience strategies to customers and partners, and participate in high-level customer meetings.

What We're Looking For:

• >10 to 15 Years of relevant work experience

• >5 to 8 Years of experience directly managing / supervising employees

• Operational risk or resilience within cybersecurity or cyber-heavy operations, with at least 5 years in a leadership role focusing on operational risk and resilience and incident management.

• Program Development: Proven experience in developing and implementing operational resilience programs.

• Risk Management Expertise: Strong understanding of risk management, global emergent risk, and incident response.

• Global Perspective: Experience working in a global role with exposure to diverse international markets and risk environments.

• Cultural Competence: Ability to work effectively across different time zones and cultures.

• Business Acumen: Experience in translating operational risk and resilience concepts into business value propositions for customers.

• Business Continuity, Risk Management, Cybersecurity, Training and Exercises, Incident Management a