Manager, Cyber Security, Risk, and Compliance

Company Overview

Welcome to Timewise, where great people power great experiences! Shell Mobility & Convenience proudly operates more than 200 Timewise convenience stores and Shell fuel stations across Texas and New Mexico. As part of the Shell Group since 2022, we combine the strength of a global organization with a welcoming, team-oriented culture. We are committed to providing exceptional customer experiences while creating meaningful career growth opportunities for our employees.

Position Summary

The Manager, Cyber Security, Risk & Compliance leads the company’s cyber security governance, information technology risk management, privacy assurance, and compliance coordination activities. This role serves as the primary point of contact for cyber threats and response coordination and works across Technology, Legal, Finance, Internal Audit, Operations, business teams, and third-party service providers to implement practical controls that protect company systems, data, customers, and operations.

The position combines governance and risk leadership with hands-on coordination of security testing, awareness, vulnerability management, PCI compliance, Data Protection Impact Assessments, incident response, and remediation tracking.

Key Responsibilities

IT Risk Management and Controls

• Lead IT risk assessments for applications, infrastructure, projects, business processes, acquisitions, and third-party services. • Maintain an IT and cyber security risk register, including risk owners, treatment plans, target dates, residual risk, and approved risk acceptances. • Design, document, implement, and test preventive, detective, and corrective controls. • Advise project teams and business owners on proportionate risk treatment and control requirements. • Track remediation commitments and escalate overdue or material risks to leadership.

Cyber Security Governance and Operations

• Develop and maintain cyber security policies, standards, procedures, control baselines, and incident response playbooks. • Act as the primary company focal point for cyber threats, suspected compromises, security incidents, and response coordination. • Coordinate triage, containment, investigation, recovery, communications, and lessons learned with internal teams and service providers. • Monitor relevant threat intelligence, vulnerabilities, and emerging risks and translate them into business actions. • Coordinate routine security testing, including phishing simulations, external vulnerability scans, penetration tests, and control validation. • Oversee remediation of vulnerabilities and security findings through closure.