The Security Risk Management Lead is responsible for identifying, assessing, and mitigating risks related to the organization's information technology and cybersecurity practices.
Requirements
- Bachelor's degree in information technology, cybersecurity, or a related field; Master's degree preferred.
- Minimum of 4 years of experience in cybersecurity and risk management roles.
- Strong understanding of IT security frameworks and regulatory requirements.
- Experience with reporting platform tools (ServiceNow experience preferred), including workflow creation, dashboard creation, and optimization.
- Executive Communication Skills: Proven experience in communicating and presenting risk management findings.
- Excellent problem-solving, analytical, and critical thinking skills to effectively respond to shifting priorities, demands and timelines.
- Cyber and Enterprise Risk Management Expertise: Deep understanding of cyber and ERM principles and frameworks (e.g., NIST, ISO, COSO, COBIT) with experience.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Risk and Information Systems Control (CRISC) are preferred.
Benefits
- Flexible vacation with pay, seven paid holidays, up to 160 hours of paid wellness annually, and additional paid time off for bereavement, jury duty, volunteer time, military leave, and parental leave.
- Health care insurance, retirement planning, and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO).