Cyber Risk Manager

Reynolds American is evolving into a global multi-category business. Our purpose is to create A Better Tomorrow™ by Building a Smokeless World.

To achieve our ambition, we are looking for colleagues who are ready to join us on this journey. Tomorrow can’t wait, let’s shape it together!

REYNOLDS AMERICAN has an exciting opportunity for a Cyber Risk Manager in Winston Salem

We are seeking a highly skilled and experienced Cyber Risk Manager to join our dynamic and growing team. The ideal candidate will be responsible for identifying, assessing, and managing cyber risks to protect our organization's information assets and ensure the confidentiality, integrity, and availability of our data. The Cyber Risk Manager will work closely with various departments to develop and implement effective risk management strategies and policies.

Direct impact of this role:

• Build and maintain successful relationships with your business teams, Enterprise Risk Management team, Global Cyber Governance Risk & Compliance teams
• Work with Enterprise Risk Management and Cyber Governance Risk & Compliance teams to conduct comprehensive risk assessments to identify potential cyber threats and vulnerabilities.
• Analyze the potential impact of identified risks on the organization's operations and assets.
• Work with Enterprise Risk Management team to maintain a risk register to document identified risks and their corresponding mitigation strategies.
• Monitor and review the effectiveness of risk management strategies and make necessary adjustments.

Your key responsibilities will include:

• Policy Development: Develop, implement, and maintain cybersecurity policies and procedures to ensure the security of sensitive data and information.
• Compliance: Ensure compliance with relevant laws, regulations, and industry standards related to cybersecurity.
• Collaboration: Collaborate with IT and other departments to ensure cybersecurity measures are integrated into all aspects of the organization’s operations.
• Continuous Improvement: Stay updated on the latest cybersecurity trends, threats, and best practices to continually enhance the organization’s cybersecurity posture.
• Vendor Management: Evaluate and manage third-party vendors to ensure they adhere to the organization’s cybersecurity standards.
• Reporting: Prepare and present regular reports on the organization's cybersecurity status to senior management and other stakeholders.
• Security Audits: assist in security audits and vulnerability assessments to verify the effectiveness of security measures and identify areas for improvement.
• Risk Mitigation: Develop and implement strategies to mitigate identified cybersecurity risks and prevent data breaches.

What are we looking for?

• Bachelor’s degree or equivalent in Computer Science
• Ability to conduct risk assessments and analyse potential threats and vulnerabilities specific to environments. Skill in developing risk mitigation strategies and prioritizing security controls to address identified risks.
• Expertise in understanding secure architectures, including network segmentation, secure communication channels, and access controls for critical assets. Ability to integrate security controls into existing infrastructure.
• Strong knowledge of network security principles and techniques, including firewalls, intrusion detection and prevention systems (IDPS), virtual private networks (VPNs), and secure remote access. Understanding how to apply these concepts to OT networks.
• Knowledge of machine learning and artificial intelligence applications in security
• Strong knowledge of security frameworks and standards (e.g., NIST, CIS, ISO 27001
• Self-motivated and results focused; ability to strengthen the team and its mission.
• Excellent communication and interpersonal skills to collaborate with technical and non-technical stakeholders
• Ability to think critically and solve complex problems, and make data-driven decisions

BENEFICIAL

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Scaled Agile Framework (SAFe 5 or higher)

WE ARE REYNOLDS AMERICAN—A member of the BRITISH AMERICAN TOBACCO GROUP

At Reynolds American, we are committed to our Purpose of creating A Better Tomorrow. This is what drives our people and our passion for innovation. See what is possible for you at REYNOLDS AMERICAN.

BELONGING, ACHIEVING, TOGETHER

Collaboration and teamwork underpin everything we do here at Reynolds American. We know that collaborating with colleagues is what makes us stronger and best prepared to meet our business goals.

SALARY AND BENEFITS OVERVIEW

Benefit Information

The following is a general summary of the competitive compensation and benefit plans we offer:

• 401(k) plan that offers opportunity to save on pre- and post-tax basis up to 50 percent of eligible compensation.
  • Company matches 100 percent of employee pre-tax/Roth (401k) contributions up to six percent
  • Company contributes an additional three percent to 401(k) whether employee participates or not
• Comprehensive health- and welfare-benefits package (including medical, dental, vision, and prescription drugs)
• Health Savings Account start-up contribution for employees who elect the high deductible health plan
• Flexible spending accounts for both Health Care and Dependent Care allowing employee to use pre-tax dollars to pay for qualified expenses during the calendar year
• Employee assistance program offering 8 free counselling sessions, per issue, each calendar year for employees and their dependents
• Company paid life insurance of 1x annual base pay ($50,000 minimum)
• Company paid accidental death or dismemberment insurance of