Description

You will own the cyber risk management program, translating technical vulnerabilities into business terms for senior leadership and driving remediation efforts.

This role is on-site.

Responsibilities

• Facilitate risk acceptance discussions and present executive-ready materials to senior leadership.
• Maintain the cyber risk register, tracking remediation actions and acceptance decisions.
• Perform qualitative risk analysis using scenario-based models to evaluate likelihood and impact.
• Evaluate control effectiveness and provide risk-based recommendations for compensating controls.
• Support the design and continuous improvement of the cyber risk management program.

Required Skills

• 7+ years in cyber risk, IT risk, or information security risk (consulting or Big 4 experience preferred).
• Strong communication and presentation skills with the ability to engage senior leadership.
• Experience managing risk registers and tracking remediation activities.
• Technical understanding of systems, controls, and risk scenarios.
• Proactive organization with the ability to anticipate stakeholder needs.
• Experience contributing to risk program design or process improvement.

Preferred Skills

• Qualitative risk analysis methodologies in cybersecurity or IT environments.
• Knowledge of FAIR (Factor Analysis of Information Risk), ISO 27001, or NIST frameworks.
• Experience with ServiceNow IRM or similar GRC platforms.

Key Skills

Education

Bachelor's degree