Description

Manage the end-to-end cyber risk lifecycle and facilitate risk-aware decision-making across technical and non-technical audiences.

Responsibilities

• Manage cyber risk assessments and evaluate internal operational controls for alignment with treatment needs.
• Analyze, frame, and update threat and risk scenarios for use in risk management.
• Communicate cyber risk, appetite updates, and treatment options to management and stakeholders.
• Adjust cyber risk scores based on available controls and create dashboards for complex risk and control relationships.
• Support internal and external audits and regulatory exams through risk management oversight.

Required Skills

• 10+ years of experience in governance, risk, and compliance or a related compliance analyst role.
• Experience reviewing and managing cyber risk assessments.
• Familiarity with cybersecurity frameworks such as NIST-CSF.
• Proficiency with risk tools including Archer, ServiceNow, or MetricStream.
• In-depth knowledge of industry compliance requirements and regulatory frameworks.
• Experience with requirements analysis and developing standards to maintain legal compliance.
• Strong skills in project management, strategic planning, and process improvement methodology.

Preferred Skills

• Professional certifications including CISSP, CISA, or CRISC.

Key Skills

Education

Any Graduate