Governance Risk and Compliance Manager (GRC), Cyber Security and Privacy

Role Overview: As the Security and Privacy Governance Risk and Compliance Manager, your role is crucial in establishing and overseeing risk and controls operational responsibilities for the Security and Privacy function. You will work closely with various stakeholders to align the vision, goals, policies, and standards of the function with the company's business strategy. Your primary responsibility will be to ensure the alignment of security and privacy controls with the company's assets and customer data across software environments. Key Responsibilities: - Represent Security and Privacy and serve as the primary point of contact for business security matters, fostering strong partnerships with the Company business. - Understand the Company business strategy, requirements, and risk appetite to drive alignment between Security and Privacy and the Company business. - Identify and communicate security risks within the Company business, develop plans to address and reduce those risks, and oversee implementation and compliance with security and privacy program objectives. - Engage with the Company business on key projects and initiatives, providing security and privacy consulting services and assessing the impact of changing regulations. - Advise the Company business on security and privacy requirements and risks, promote a risk-aware culture, and provide role-based security and privacy training and awareness. - Advise key leadership groups on security and privacy risks, incidents, and topics, ensuring appropriate representation in business and governance forums. - Assist in planning, preparing for, and managing security incidents and investigations, including advising on emergency actions to protect the business. - Provide input into Security and privacy strategy, policies, standards, and procedures based on business requirements, risk tolerance, and industry standards. - Represent Security and Privacy externally by providing information and reassurance as required and coordinating third-party risk assessments. Qualifications Required: - Solid proven experience in cybersecurity and privacy discipline. - Understanding of the financial services industry, preferably asset management. - Experience in large/global corporate environments involving multiple businesses. - Experience with audit and regulatory reviews, risk management methodologies, regulatory security requirements, and technology general controls. - Experience in reporting and presenting to senior management and audiences. - Management of security projects, security advice to major initiatives, and definition of security strategy. - Experience in security and privacy incidents, investigations, and certifications like CISSP/CRISC/CISM. - Effective communication and presentation skills, ability to translate technical topics into business language. - Strong analysis and assessment skills, team-oriented style, crisis management skills, and project management abilities. - Degree level education, preferably in computer science or a technology-related field. Role Overview: As the Security and Privacy Governance Risk and Compliance Manager, your role is crucial in establishing and overseeing risk and controls operational responsibilities for the Security and Privacy function. You will work closely with various stakeholders to align the vision, goals, policies, and standards of the function with the company's business strategy. Your primary responsibility will be to ensure the alignment of security and privacy controls with the company's assets and customer data across software environments. Key Responsibilities: - Represent Security and Privacy and serve as the primary point of contact for business security matters, fostering strong partnerships with the Company business. - Understand the Company business strategy, requirements, and risk appetite to drive alignment between Security and Privacy and the Company business. - Identify and communicate security risks within the Company business, develop plans to address and reduce those risks, and oversee implementation and compliance with security and privacy program objectives. - Engage with the Company business on key projects and initiatives, providing security and privacy consulting services and assessing the impact of changing regulations. - Advise the Company business on security and privacy requirements and risks, promote a risk-aware culture, and provide role-based security and privacy training and awareness. - Advise key leadership groups on security and privacy risks, incidents, and topics, ensuring appropriate representation in business and governance forums. - Assist in planning, preparing for, and managing security incidents and investigations, including advising on emergency actions to protect the business. - Provide input into Security and privacy strategy, policies, standards, and procedures based on business requirements, risk tolerance, and industry standards. - Represent Security and Privacy ex