Risk Manager

Key Responsibilities: Risk Management & Governance: - Understand applicable regulations, guidelines, and industry best practices (e.g., NIST, ISO, OWASP, ITIL) to manage risk and ensure compliance. - Develop, maintain, and audit security documentation such as policies, standards, and procedures. - Monitor internal security controls for EDR, email security, server security, and cloud security. - Conduct internal security assessments to ensure continued compliance. - Explain risk management roles across teams and secure buy-in for improving organizational security posture. - Manage SOC 2 Type 2 assessments and collect evidence for relevant controls. - Review RFPs for cybersecurity-related responses. - Manage cybersecurity dashboards, reports, and board meeting MOMs. - Evaluate vendors for cybersecurity controls and review firewall rules for on-premises and AWS. Cloud & Infrastructure Security: - Implement and manage AWS Cloud security and Office 365 security . - Manage SOC, incident response, and business continuity activities. - Support internal and external audits and follow up until closure on audit findings. Security Awareness & Training: - Create security awareness materials (PPTs, emailers) and conduct training as needed. - Develop CISO dashboards and success reports. - Engage with business teams to understand cybersecurity requirements. Skills: Firewall Management, Soc Experience: 5.00-9.00 Years