Cyber Risk Manager

British American Tobacco•Winston-Salem, NC

3d•Hybrid

About The Position

Reynolds American is seeking a Cyber Risk Manager to identify, assess, and manage cyber risks, protecting the organization’s information assets and the confidentiality, integrity, and availability of its data. The role works with business teams, Enterprise Risk Management, Global Cyber Governance Risk & Compliance, IT, and other departments to develop and implement effective risk-management strategies, policies, and security measures. The position is based in Winston-Salem; the listing includes the tag #LI-Hybrid. The manager conducts risk assessments, analyzes potential impacts to operations and assets, maintains risk documentation and mitigation strategies, and monitors the effectiveness of controls. The role also develops cybersecurity policies and procedures, supports regulatory and standards compliance, evaluates vendors, assists with security audits and vulnerability assessments, and reports cybersecurity status to senior management and other stakeholders. The manager stays current with cybersecurity trends, threats, and practices to continually improve the organization’s cybersecurity posture.

Requirements

Bachelor’s degree or equivalent in Computer Science.
Ability to conduct risk assessments and analyze potential threats and vulnerabilities specific to environments.
Skill in developing risk-mitigation strategies and prioritizing security controls to address identified risks.
Expertise in secure architectures, including network segmentation, secure communication channels, and access controls for critical assets.
Ability to integrate security controls into existing infrastructure.
Strong knowledge of network security principles and techniques, including firewalls, intrusion detection and prevention systems (IDPS), virtual private networks (VPNs), and secure remote access.
Understanding of how to apply network-security concepts to OT networks.
Knowledge of machine learning and artificial intelligence applications in security.
Strong knowledge of security frameworks and standards, such as NIST, CIS, and ISO 27001.
Self-motivated and results-focused, with the ability to strengthen the team and its mission.
Excellent communication and interpersonal skills for collaborating with technical and non-technical stakeholders.
Ability to think critically, solve complex problems, and make data-driven decisions.

Nice To Haves

Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Scaled Agile Framework (SAFe 5 or higher).

Responsibilities

Build and maintain relationships with business teams, Enterprise Risk Management, and Global Cyber Governance Risk & Compliance teams.
Conduct comprehensive risk assessments to identify cyber threats and vulnerabilities, and analyze their potential impact on organizational operations and assets.
Work with Enterprise Risk Management to maintain a risk register documenting identified risks and mitigation strategies.
Monitor the effectiveness of risk-management strategies and adjust them as needed.
Develop, implement, and maintain cybersecurity policies and procedures to protect sensitive data and information.
Ensure compliance with applicable cybersecurity laws, regulations, and industry standards.
Collaborate with IT and other departments to integrate cybersecurity measures into organizational operations.
Stay informed about cybersecurity trends, threats, and best practices to improve the organization’s cybersecurity posture.
Evaluate and manage third-party vendors to ensure they adhere to organizational cybersecurity standards.
Prepare and present regular cybersecurity status reports to senior management and other stakeholders.
Assist with security audits and vulnerability assessments to verify security measures and identify areas for improvement.
Develop and implement strategies to mitigate cybersecurity risks and prevent data breaches.

Benefits

401(k) plan with pre- and post-tax savings opportunities; company matching of eligible employee contributions up to 6%, plus an additional 3% company contribution.
Medical, dental, vision, and prescription drug coverage.
Health Savings Account start-up contribution for employees who elect the high deductible health plan.
Health Care and Dependent Care flexible spending accounts.
Employee assistance program with eight free counseling sessions per issue each calendar year for employees and dependents.
Company-paid life insurance and accidental death or dismemberment insurance.
Voluntary insurance options, including employee and dependent life insurance, AD&D, critical illness, accident coverage, disability buy-up, and auto and home insurance.
Tuition reimbursement and student loan support.
Dependent scholarship programs.
Confidential personal financial counseling service.
On-site health centers and 24/7 fitness centers at certain company locations.
Charitable giving matching grants program.
Health-care concierge service.
Volunteer service opportunities.
Extensive training opportunities and access to online learning platforms and personalized growth programs.
Company vehicle for eligible employees.
Mobile phone allowance for eligible employees.
Paid sick and personal time, vacation, company holidays, and personal holidays.
Paid parental leave and temporary reduced work schedule opportunity.
Funeral leave, short-term disability leave, long-term disability leave, jury duty leave, military leave, released time for children’s education, community outreach leave, and other paid leave as required by state or local law.
Opportunities for internal advancement and career development.