Description

Education & Experience Required:

- Bachelors degree with 5+ years experience in this capacity

- No degree , they must have at a minimum of 7+ years in this capacity.

Required Technical Skills 

(Required)

• 5+ years in cyber risk, IT risk, or information security risk (consulting or Big 4 experience preferred).

• Strong communication and presentation skills with ability to engage senior leadership.

Ability to translate technical concepts into business risk language.

• Experience managing risk registers and tracking remediation activities.

• Technical understanding of systems, controls, and risk scenarios.

• Proactive, organized, and able to anticipate stakeholder needs.

• Experience contributing to risk program design or process improvement  

Nice to Have:

• Experience with qualitative risk analysis methodologies in cybersecurity or IT environments.

• Prior experience with FAIR (Factor Analysis of Information Risk).

• Familiarity with ISO 27001, NIST, or similar frameworks.

• Experience with ServiceNow IRM or similar GRC platforms.

• Relevant certifications (CISSP, CISA, CISM, CRISC)

Key Skills

Education

Bachelor's degree