Cybersecurity Risk Specialist

Key Responsibilities

• Solicit, review, and deliver responses on information security processes and controls for:

- Regulatory exams

- External audits and meetings

- Surveys and questionnaires

- Attestations and internal audits

• Consult with internal stakeholders on alerts and advisories from regional regulators.
• Collaborate with stakeholders to identify, onboard, and submit non-financial regulatory report (NFRR) change requests related to information security.
• Assist the Regulatory Exam Management team in providing regional governance for potentially regulatory-reportable cyber incidents.
• Drive initiatives for the Regulatory Exam Management team based on the annual strategy.
• Ensure that team processes and playbooks are current, effective, and efficient.

Key Requirements

• Bachelor's degree in Information Technology or a related field.
• 5-7 years of experience in cybersecurity, risk management, or regulatory compliance.
• Strong operational mindset with attention to detail.
• Excellent analytical problem-solving skills and conceptual thinking.
• Comfortable presenting to executives and senior management.
• Understanding of information security principles, processes, and controls.
• Knowledge of APAC laws, rules, and regulations impacting information security.
• Excellent command of the English language, with strong verbal and written communication skills.
• Preferred certifications: CISSP, CISA, CRISC, or CISM.

Key Responsibilities

• Solicit, review, and deliver responses on information security processes and controls for:

- Regulatory exams

- External audits and meetings

- Surveys and questionnaires

- Attestations and internal audits

• Consult with internal stakeholders on alerts and advisories from regional regulators.
• Collaborate with stakeholders to identify, onboard, and submit non-financial regulatory report (NFRR) change requests related to information security.
• Assist the Regulatory Exam Management team in providing regional governance for potentially regulatory-reportable cyber incidents.
• Drive initiatives for the Regulatory Exam Management team based on the annual strategy.
• Ensure that team processes and playbooks are current, effective, and efficient.

Key Requirements

• Bachelor's degree in Information Technology or a related field.
• 5-7 years of experience in cybersecurity, risk management, or regulatory compliance.
• Strong operational mindset with attention to detail.
• Excellent analytical problem-solving skills and conceptual thinking.
• Comfortable presenting to executives and senior management.
• Understanding of information security principles, processes, and controls.
• Knowledge of APAC laws, rules, and regulations impacting information security.
• Excellent command of the English language, with strong verbal and written communication skills.
• Preferred certifications: CISSP, CISA, CRISC, or CISM.