Cybersecurity Risk & Assurance Manager

at  Vipas AB

JOB DESCRIPTION:

We are seeking an experienced Cybersecurity Risk & Quality Assurance Manager on a temporary consulting basis to ensure comprehensive cybersecurity risk management and quality assurance processes. The consultant will oversee and maintain the Bank’s security control framework, manage quality assurance practices, and continuously improve cybersecurity controls to address evolving threats.

REQUIREMENTS:

• Minimum 5 years of experience in cybersecurity risk management, security control frameworks, and quality assurance.
• Expertise in overseeing and maintaining security frameworks (e.g., NIST CSF, CIS Controls) and conducting internal control testing, audits, and vulnerability assessments.
• Strong capability in driving continuous improvement programs and ensuring operational effectiveness of cybersecurity controls.
• Relevant certifications (CISSP, CISM, CRISC) and fluency in Swedish and English are essential.
• Experience with hybrid environments (on-premise, cloud) and knowledge of Lean-Agile or DevSecOps methodologies.
  Why Join Us?
  Vipas AB offers attractive employment packages for IT consultants, aligned with the Teknikföretagen (Almega) collective agreement. Clients Working with us provides opportunities in diverse industries, allowing you flexibility and growth. If you’re driven and eager to face new challenges, join the VIPAS family.
  You’ll be part of an innovative team driving the future of telecom, Automotive, Retail, and Banking. If you’re ready to take on challenging projects and grow your career in a cutting-edge environment, this is the opportunity for you!
  Apply Now & Please feel free to reach me at - sandhya@vipas.se
  Note: Please do apply if you have Sweden PR/ citizenship OR a Sweden work permit.

• Cybersecurity Risk Management: Integrate cybersecurity risk management into the Enterprise Risk Management (ERM) framework, ensuring risks are identified, assessed, and mitigated.
• Security Control Framework: Oversee and maintain the Security Control Framework aligned with industry standards (e.g., NIST CSF, CIS Controls) to address risks and ensure effective security controls.
• Threat Catalogue Management: Regularly update and manage the Threat Catalogue to account for evolving threats, guiding mitigation strategies.
• Quality Assurance: Define and drive a robust cybersecurity quality assurance program, including penetration testing, red team exercises, vulnerability scanning, and control testing, ensuring operational effectiveness.
• Continuous Improvement: Drive a cybersecurity continuous improvement program to adapt and enhance controls in response to emerging threats, audit findings, and business needs.
• Regulatory Compliance: Ensure cybersecurity practices comply with regulatory requirements and support regulatory audits, reporting on compliance status.
• Cybersecurity Reporting: Develop and report on Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), and cybersecurity maturity assessments to measure effectiveness and guide decision-making.