Senior Manager - Risk & Compliance (Cluster CISO)

Senior Manager - Risk & Compliance (Cluster CISO)

The Senior Manager, Risk & Compliance supports the effective management of cybersecurity and IT risks across Cluster. The role is responsible for maintaining the risk register, coordinating audits, ensuring compliance with regulatory and internal requirements, and driving timely closure of risk and compliance issues. The position also plays a critical role in supporting the Cybersecurity Management Committee (CMC) and acts as a bridge between operational teams, regulators, auditors, and management to provide visibility and assurance on Clusters’ cybersecurity risk posture.

Position Overview

The Senior Manager, Risk & Compliance supports the effective management of cybersecurity and IT risks across Cluster. The role is responsible for maintaining the risk register, coordinating audits, ensuring compliance with regulatory and internal requirements, and driving timely closure of risk and compliance issues. The position also plays a critical role in supporting the Cybersecurity Management Committee (CMC) and acts as a bridge between operational teams, regulators, auditors, and management to provide visibility and assurance on Clusters’ cybersecurity risk posture.

Role & Responsibilities

Cybersecurity Management Committee (CMC) Secretariat

• Serve as the secretariat to the CMC, coordinating agendas, materials, and minutes.
• Ensure timely maintenance and reporting of the Cybersecurity Risk Register to the CMC.
• Track and follow up on risk-related action items arising from CMC meetings.
• Support CMC reporting obligations to senior management, MOH, and other authorities.

Risk Assessment & Tracking

Audit Coordination & Risk Remediation

Policy Compliance & Governance

Operational Risk & Oversight

Stakeholder Engagement & Reporting

Requirements

8–10 years in Information Security, IT Risk, Audit, or related fields.

Strong organisational and coordination abilities.

#J-18808-Ljbffr