• Collaborates with Strategic Procurement for the sourcing exercise and on-boarding of the third-parties for the execution of cyber assurance activities.
• Leads the execution of third-party cyber risk assessments (pre and post contacting, and ongoing monitoring) to ensure compliance with internal information security policies and procedures, as well as external requirements.
• Ensures that cybersecurity clauses are embedded in the agreements with third parties.
• Manage cybersecurity risks, vulnerabilities, and defects from identification to remediation.
• Performs risk assessments, documents them and support the implementation of mitigating controls consistent with company strategy.
• Generate reports to demonstrate cyber assurance metrics and KPI.
• Identify Cyber risks, communicate and develop "best practice" solutions, and recommend mitigating controls consistent with company strategy.
• Introduce new processes, initiatives to improve cyber assurance practice.
• Represent the organization and take an active participation on different IT business or security airline specific forums.
• Supporting the leadership team on strategic initiatives specific to the respective portfolio.

Years Of Experience Required

6-8 years of IT technology, operations, and people leadership experience in a large company, with a minimum of 4 years of experience in a cyber security and/or risk & compliance role.

Required Skills