Insider Risk Manager
Insider Risk Manager
In today's digital age, the importance of cybersecurity cannot be overstated. As cyber threats continue to evolve and become more sophisticated, organizations must prioritize robust risk management and compliance strategies to safeguard their assets and data. The growing threat landscape necessitates a proactive approach to cybersecurity, moving beyond mere compliance to comprehensive risk management.
As insider risks emerge among the top three organizational threats, a dedicated focus is essential. The role of Insider Risk Manager reflects the need for specialized expertise in managing internal vulnerabilities. This role enables the development of targeted strategies, preventive measures, and tailored training programs to mitigate insider threats. By integrating awareness initiatives with focused risk management, the Insider Risk Manager strengthens the organization’s security posture and fosters a culture of vigilance and proactive incident response
What we ask
The Insider Risk Manager plays a pivotal role in safeguarding the organization from internal threats by leading a comprehensive insider risk program. This role encompasses proactive risk assessment, policy development, and the implementation of monitoring systems to detect and respond to suspicious activities. Through collaboration across departments, tailored training initiatives, and awareness campaigns, the Insider Risk Manager fosters a culture of vigilance. The position also ensures regulatory compliance and continuous improvement of insider risk strategies, aligning with the organization’s broader security objectives.
Risk Assessment:
- Conducting risk assessments to identify potential insider risks;
- Analyzing the organization's vulnerabilities to insider risks.
Policy Development:
- Developing and implementing policies and procedures to prevent and respond to insider risks;
- Collaborating with other departments to ensure alignment with overall security policies.
Monitoring and Detection:
- Implementing monitoring systems to detect unusual or suspicious activities;
- Analyzing user behavior to identify patterns indicative of insider risks.
Investigation and Incident Response:
- Conducting investigations into suspected insider risks;
- Coordinating with law enforcement, legal, and HR departments in the event of an incident.
Training and Awareness:
- Designing and delivering training programs to educate employees on recognizing and reporting potential insider risks;
- Promoting a culture of security awareness through regular communication channels.
Awareness Campaigns:
- Developing and executing awareness campaigns to highlight the importance of security and the potential risks associated with insider risks;
- Utilizing various communication channels, such as email, posters, and intranet, to disseminate information on insider risk awareness.
Collaboration:
- Collaborating with IT, cybersecurity, and other relevant departments to enhance overall security posture;
- Sharing risk intelligence with other organizations to stay informed about emerging trends.
Insider Risk Program Management:
- Developing and managing an insider risk program;
- Regularly reviewing and updating policies and procedures based on evolving risks.
Compliance:
- Ensuring that the organization's insider risk program complies with relevant regulations and industry standards.
What we offer
FrieslandCampina has a unique company culture of Dutch heritage and international presence. The work environment is informal and friendly, where you collaborate with passionate professionals. You will have access to training and coaching to support your professional growth, and internal career development opportunities are actively encouraged. With trust and autonomy, you will have the chance to create lasting impact, contributing to better nutrition for the world. As for the employment benefits:
Full-time workweek of 38 hours, 5% year-end bonus, 12,5% bonus, and a pension;
Flexible working hours and ample opportunities to work from home;
200 hours of annual leave, the option to buy or sell 40 extra hours, and 8% holiday allowance;
Free milk & cheese during lunch and delicious barista coffee at our headquarters.
Vacancy description
- Bachelors’ or Master’s degree required with a major in Computer and/or Mathematics, or Engineering;
- 5+ years working experience in IT Risk management and Security, preferably 3 years in awareness and insider risk management;
- Certified CISM or equivalent;
- Excellent people management skills as well as good knowledge of IT and Cyber security;
- Exhibit strong written and verbal communication skills;
- Demonstrate the ability to think and deliver strategically and make operational translation, and vice versa;
- Demonstrate proven experience in risk management, IT / Information Security policies, standards, and controls, regulatory and audit compliance, and information security awareness;
- Translate complex concepts across multiple layers of resources into understandable and actionable terms;
- Build relationships effectively and collaborate easily with others to drive results and solve problems in sustainable way;
- Thought leader on Information security. Ability to communicate on C-level;
- Proficiency in English, both oral and written.
Team Details
See all colleagues on LinkedInFor thousands of people every day, we are more than just a dairy company. To our farmers, our employees, the communities we serve, the businesses we work with and the people to whom we bring happiness, FrieslandCampina means something more. For them it's not just about what we do, but who we are.
We value talented people from any background who want to contribute to something bigger than themselves. We encourage all of our employees to make decisions that benefit our entire company. At FrieslandCampina we own our own career and act accordingly. We trust you to make a difference in your job and influence the bigger picture. Working at FrieslandCampina means you are contributing to a better world.
You will be part of our global CISO Office, reporting to the Head of Cyber Risk Management. Further close collaboration is expected with our group IT and OT teams, communications, Internal risk team EGRC and business groups.