Cyber Risk & Governance Specialist

Preferred Materials, Inc. in; Lutz (FL); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Competitive pay

Medical benefits

Retirement plan

Wellness programs

Inclusive culture

Job summary

CRH is seeking a seasoned cybersecurity governance and risk management professional to lead global risk assessment processes across 150+ entities. You will drive standards, third-party due diligence, and governance with cross-functional teams to strengthen information security controls and meet regulatory expectations.

The role partners with Legal, Compliance, Finance, IT, and Internal Audit to support audit findings and ensure timely remediation within a global, matrixed organization.

Qualifications

• 3+ years in cybersecurity governance and risk management within large global organizations
• Experience implementing risk management and assurance frameworks (e.g., NIST CSF, IEC/ISO 27001)
• Ability to advise and support audit findings across cyber and IT domains
• Experience with GRC platforms and security testing tools is a plus
• Excellent stakeholder engagement and communication skills

Responsibilities

• Develop, implement, and enhance global cyber risk assessment processes for 150+ entities
• Roll out information security standards and best practices across the Group
• Design and deploy third-party due diligence processes
• Coordinate with multiple teams to manage supplier risks
• Ensure alignment with IEC/ISO 27001 accreditation requirements
• Support SOX and regulatory reporting requirements

Skills

Cybersecurity governance

Risk management

Compliance/assurance

IEC/ISO 27001

GRC platforms (RSA Archer)

SOX reporting

Education

Bachelor's degree in IT/Information Security or related

Tools

RSA Archer

Job description

CRH is seeking a seasoned cybersecurity governance and risk management professional to lead global risk assessment processes across 150+ entities. You will drive standards, third-party due diligence, and governance with cross-functional teams to strengthen information security controls and meet regulatory expectations.

The role partners with Legal, Compliance, Finance, IT, and Internal Audit to support audit findings and ensure timely remediation within a global, matrixed organization.