Senior Information Security Risk Manager

Job Summary

To enhance the GRC function, the full-time Senior Information Security Risk Manager will manage the risk management program, collaborate with security personnel to identify enterprise-level risks, and assist in annual audits while working remotely.

Key responsibilities

• Review and improve the current information risk program, focusing on risk identification, measurement, tracking, and remediation
• Collaborate with internal teams and engineering to design solutions that mitigate security risks and ensure compliance with regulatory frameworks
• Assist in annual audits and document findings while evaluating third-party vendors for compliance with established standards

Required qualifications

• 7+ years of experience in information security, GRC, and/or risk management
• High school diploma or equivalent required; Bachelor's degree in information security or IT-related field preferred
• Security+, CRISC, or CISA certifications preferred
• Willingness to learn new concepts and train junior team members
• Strong understanding of risk assessments and risk frameworks