Description

You will manage the daily oversight of the risk management program, establishing processes and operations for all areas of cyber risk.

Responsibilities

• Maintain risk registers to track key risk indicators and ensure risks are identified, evaluated, and mitigated.
• Collaborate with Engineering and IT teams to implement technical risk and control solutions.
• Analyze risk data from various sources to develop predictive models and assess financial, operational, and security impacts.
• Prepare regular risk reports, dashboards, and presentations for internal and external stakeholders.
• Coordinate with internal and external auditors to support compliance assessments and resolve findings.
• Develop risk management policies, procedures, and frameworks to enhance organizational risk culture.

Required Skills

• 2+ years of experience in security-centric risk management and compliance frameworks.
• Experience implementing industry-accepted frameworks such as NIST RMF, COS0 ERM, or ISO 31000.
• Proven ability to identify, analyze, and quantify risks from a technical perspective.
• Experience operationalizing both qualitative and quantitative risk analysis.
• Track record of managing risk assessments, risk registers, and compliance programs.
• Ability to interpret technical control requirements and relay them to diverse stakeholder groups.
• Strong bias towards automation and tooling to scale program impact.
• Ability to manage multiple projects under tight deadlines in ambiguous environments.

Preferred Skills

• Bachelor’s degree in Risk Management, Business, Finance, or Cybersecurity.
• Professional certifications including CRISC, CISSP, CISA, or FRM.
• Proficiency with risk management software such as RSA Archer, MetricStream, or ServiceNow.

Key Skills

Education

Bachelor’s degree in Risk Management