Apply on Employer Site

Hyundai Capital Canada · 1 month ago

Cybersecurity Governance Manager

Headquarters 13161 Michelson Dr. Ste 1900

Full-time

Onsite

Senior Level

$92K/yr - $144K/yr

5+ years exp

Hyundai Capital America is a company that provides a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers. The Cybersecurity Governance Manager plays a critical role in ensuring policies, governance frameworks, and regulatory adherence in cybersecurity governance, risk, and compliance across the organization, while managing security policies and conducting risk assessments.

AutomotiveFinanceFinancial Services

Responsibilities

Manage, maintain and enforce security policies, standards and guidelines related to Cybersecurity governance processes

Develop, implement, maintain and execute a Cybersecurity Risk Register, Policy Risk Exception Process, and Procedures

Conduct risk assessments and impact analyses to identify risks, manage remediations, to ensure compliance across business systems, IT Infrastructure, and network operating environments

Perform Global Integrated Security Framework (GSIF) assessments, monitor and ensure remediations are following GSIF ISO 27001 standards across cross-functional departments

Collaborate with Cybersecurity Risk Management, Cybersecurity Engineering Operations, and IT to ensure security best practices are integrated within each project and system deployment

Develop metrics and reporting for senior management and stakeholders that identify security risks and provide actionable insights to address gaps

Develop and maintain the governance mechanisms and automation tools track the Risk Register, and compliance status across the organization

Develop and maintain dashboards and regular reporting to manage management performance metrics, risk metrics

Qualification

Cybersecurity GovernanceRisk ManagementComplianceCISSPISO 27001NIST FrameworksCommunication SkillsTeam Collaboration

Required

Minimum 5-7 years progressive experience in cybersecurity governance, risk management, or compliance within financial services with a deep understanding of the IT systems

Bachelor's degree in Cybersecurity, Information Security, Risk Management or a related field

Working knowledge of Cybersecurity risk management frameworks, Governance, Risk, and Compliance process, IT general controls (e.g. asset classification, risk assessments, vulnerability and threat analysis, risk treatment, audit controls and remediation, vendor risk management, and IT risk management & reporting)

Working knowledge of Information Security & Risk Frameworks including ISO 27001/2, ISO 31000:2009, ISO 27005:2008; NIST Special Publications and Methodologies (e.g. SP800-12, 30, 37, 39, 53,150, 161)

Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations

Basic understanding of financial regulatory frameworks and cybersecurity best practices

Ability to communicate complex security concepts to business leaders and technical teams