cybersecurity risk manager
Cybersecurity risk managers identify, analyse, assess, estimate and mitigate cybersecurity-related risks of ICT infrastructures such as systems or services. They manage these aspects by planning risk analysis, applying, reporting, assessing, communicating, and treating them. They establish a risk management strategy for the organisation and ensure that risks remain at an acceptable level for the organisation by selecting mitigation actions and controls.
Also called: cybersecurity specialist, information security manager, information security risk analyst, IT security manager, ICT security chief, cybersecurity risk assurance consultant, cybersecurity risk assessor, security coordinator
- 22
- essential skills
- 50
- optional skills
- 8
- related roles
- 2529
- ISCO-08 group
Where you can go from here
8 rolesOccupations sharing the most essential skills with this one. The number is a count, not an opinion.
- chief ICT security officerWhat changes?20 skills in common
- cyber incident responderWhat changes?12 skills in common
- ethical hackerWhat changes?12 skills in common
- ICT security technician10 skills in common
- digital forensics expert8 skills in common
- embedded systems security engineer5 skills in common
- ICT resilience manager5 skills in common
- ICT security administrator5 skills in common
Essential skills
22- advice on security risk management
- assessment of risks and threats
- attack vectors
- communicate with stakeholders
- cyber attack counter-measures
- cyber security
- engage with stakeholders
- ensure adherence to organisational ICT standards
- establish an ICT security prevention plan
- establish an Information Security Management System
- ethical hacking principles
- ICT network security risks
- ICT performance analysis methods
- ICT safety
- ICT security standards
- implement ICT risk management
- information security strategy
- internal risk management policy
- manage system security
- risk management
- security engineering
- security threats
Optional skills
50- audit techniques
- cloud monitoring and reporting
- cloud security and compliance
- computer forensics
- decision support systems
- define security policies
- define technology strategy
- design for organisational complexity
- develop information security strategy
- develop with cloud services
- domain name service
- execute ICT audits
- hybrid model
- ICT encryption
- ICT problem management techniques
- ICT process quality models
- ICT project management
- ICT quality policy
- ICT recovery techniques
- ICT security legislation
- ICT system user requirements
- identify ICT security risks
- implement a firewall
- implement a virtual private network
- implement anti-virus software
- implement cloud security and compliance
- implement ICT security policies
- implement spam protection
- information confidentiality
- internet governance
- Internet of Things
- investment analysis
- lead disaster recovery exercises
- legal requirements of ICT products
- levels of software testing
- manage disaster recovery plans
- manage keys for data protection
- mobile device management
- Open source model
- organisational resilience
- Outsourcing model
- remove computer virus or malware from a computer
- service-oriented modelling
- solve ICT system problems
- systems development life-cycle
- tools for ICT test automation
- use an application-specific interface
- use back-up and recovery tools
- use ICT ticketing system
- web application security threats
No account needed to start
How close are you to being a cybersecurity risk manager?
MyNodes reads your CV once, maps it to this same taxonomy, and shows you which roles you are already closest to and the few skills that would open the most doors. The file is deleted as soon as it has been read.