Manager IT (Cybersecurity Risk & Policy)

Job Requirements

• Lead the cybersecurity risk management program, including risk identification, assessment, and mitigation.

• Develop, implement, and maintain cybersecurity policies, standards, and procedures.

• Ensure compliance with regulatory frameworks (ISO 27001, NIST, GDPR, local aviation/critical infrastructure standards).

• Conduct impact & risk assessments, gap analyses, and control effectiveness reviews across IT and OT systems.

• Collaborate with IT, OT, and business stakeholders to embed risk-based decision-making.

• Oversee third-party/vendor risk management for cybersecurity.

• Provide executive-level reporting on risk posture, compliance status, and policy adherence.

• Support audit readiness and coordinate responses to internal/external audits.

• Drive awareness and training programs to strengthen organizational security culture.

• Thorough hands-on knowledge on GRC tools like Archer etc.

• Continuously monitor emerging threats, regulatory changes, and industry best practices to update policies.