Risk Manager

Overview:
**WELCOME TO SITA**

At **SITA**, we keep airports moving, airlines flying smoothly, and borders open. Our technology and communication innovations power the success of the global air travel industry.

You’ll find us in 95% of international airports, working closely with over 2,500 transportation and government clients. Each partnership brings unique challenges, and we thrive on delivering fresh solutions and cutting-edge tech to keep operations running like clockwork. We don’t just move the world forward—we’re proud to be recognized as a **Great Place to Work®**by our employees and certified in most of our growing locations. Here, we feel empowered, supported, and inspired to grow.

Are you ready to love your job? The adventure begins right here, with you, at SITA.

PURPOSE

**ABOUT THE ROLE & TEAM**

The Risk Manager, supporting the Cybersecurity Risk Management Team Leader, will strengthen IT risk management within SITA’s EISO team by maintaining and enhancing the cybersecurity operational risk framework. Acting as part of the Second Line of Defense (2LoD), the role includes overseeing risk and control self-assessments by the business front lines, providing objective reviews, supporting risk treatment plans, monitoring mitigation progress, and reporting key findings to steering committees.

**WHAT YOU WILL DO**
- Maintain and enhance the third-party risk management framework, including supplier onboarding, monitoring, and offboarding.
- Monitor operational risks as part of the second line of defense (2LoD) and escalate concerns exceeding agreed risk tolerance.
- Collaborate with risk owners to ensure proper implementation of risk templates and procedures through training and guidance.
- Support the cybersecurity exception handling process and review progress to ensure compliance with SITA policies and standards.
- Track, analyze, and report risk management KPIs and KRIs.
- Document key findings, analyses, and recommendations clearly for technical and non-technical stakeholders.
- Validate the adequacy and effectiveness of controls, challenging the first line where necessary.
- Develop and maintain the cybersecurity risk management framework, providing feedback for continuous improvement.
- Support compliance with legal, regulatory, and industry standards, including audits and reporting (e.g., ISO 27001, NIS2).

Qualifications:
**ABOUT YOUR SKILLS**
- 5-10 years in cybersecurity/information systems risk and control management.
- Experience with risk identification, analysis, response, and remediation.
- Skilled in assessing third-party supplier risks and reviewing assurance documents (e.g., ISO 27001, SOC2).
- Hands-on experience with IT exception handling processes.
- Strong influencing skills and ability to engage senior management.
- Excellent communication, continuous improvement and team-oriented mindset.
- University degree in Computer Science, MIS, Business Administration, or related field.
- Knowledge of security policies, procedures, and standards development is a plus.
- Familiarity with GRC tools (OneTrust, ServiceNow) is an asset.

**WHAT WE OFFER**

We’re all about diversity. We operate in 200 countries and speak 60 different languages and cultures. We’re really proud of our inclusive environment. Our offices are comfortable and fun places to work, and we make sure you get to work from home too. Find out what it's like to join our team and take a step closer to your best life ever.

**Flex Week**:Work from home up to 2 days/week (depending on your team’s needs)
- **Flex Day**: Make your workday suit your life and plans.

**Flex Location**: Take up to 30 days a year to work from any location in the world.

**Employee Wellbeing**: We’ve got you covered with our Employee Assistance Program (EAP), for you and your dependents 24/7, 365 days/year. We also offer Champion Health - a personalized platform that supports a range of wellbeing needs.

**Professional Development**: Level up your skills with our training platforms, including LinkedIn Learning

**Competitive Benefits**: Competitive benefits that make sense with both your local market and employment status.