Cybersecurity Risk Manager

Job Summary

To support the execution of an enterprise cybersecurity risk management program, the full-time Cybersecurity Risk Manager will manage risk identification, assessment, and remediation across cloud, product, third-party, and AI-enabled capabilities in a remote environment.

Key responsibilities

• Lead the execution of cybersecurity risk identification, assessment, prioritization, and treatment planning across enterprise systems
• Maintain a comprehensive cybersecurity risk register and deliver management-ready risk reporting to facilitate informed decision-making
• Align cybersecurity risk practices with regulatory requirements and support continuous monitoring for audit readiness

Required qualifications

• University degree or equivalent practical experience in Information Security, Computer Science, or a related field
• 5-7 years of progressive experience in cybersecurity risk, IT risk, audit, or compliance
• Strong knowledge of risk and control frameworks such as NIST CSF, NIST SP 800 53, ISO 27001, and SOC 2
• Experience with GRC platforms, audit evidence, and workflow automation
• Commitment to continuous learning, particularly in advancements in AI and their implications for cybersecurity