Information Security Risk Manager

TheHiveCareers; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

TheHiveCareers provides information security risk consulting services across projects, aligning security controls with business needs and regulatory expectations. You will interpret requirements and architecture, assess risks, and collaborate with teams to embed security into designs.

As part of the team, you will coordinate with clients and developers to drive risk-informed decisions, perform risk assessments, and support ongoing security maturity improvements in a dynamic environment.

Qualifications

• Experience in information security risk consulting across projects and teams.
• Ability to translate security risks into actionable guidance for stakeholders.
• Familiarity with risk assessment methodologies and regulatory expectations.

Responsibilities

• Review requirements, architecture diagrams and designs to assess security risk and provide recommendations.
• Assess applications, infrastructure, units and external suppliers for information security risks.
• Review penetration test results and code scans; coordinate mitigations with teams.
• Work with third parties and internal developers to interpret test results and ensure security controls.
• Track risk-management findings to closure and log deficiencies when needed.

Skills

Information Security

Risk Management

Consulting

Stakeholder Communication

Threat Assessment

Tools

Penetration Testing Tools

Code Scanning Tools

Threat Modeling

Job description

Job Type: Full-Time/Contract - 2 years (renewable)

Location: Trinidad and Tobago/Fully Remote

Role Summary

Provide Information Security & Technology Risk Management consulting services to Project teams based on Risk Management processes and procedures. Participate in Project meetings, Security Reviews, Walkthroughs, and Risk Assessments.

Key Responsibilities

• Review and interpret requirements documentation, architecture diagrams and solution designs to help determine the feasibility of a project and its security risk. Assess business needs against potential risks and provide your recommendations to enhance our information security landscape
• Assess applications, infrastructure, business units, business processes and external suppliers for information security risks, identifying the potential threats and exposures
• Examine and interpret requirements documents, architecture diagrams, solution designs and other written and verbal information to determine if a project, application, infrastructure or external supplier presents security risk to premium bank.
• Work with third party teams and internal development groups to interpret and review results from penetration tests on internet-facing applications as needed.
• Work with the required teams to ensure that code scans are completed for all new or modified code deployments
• Track to completion, issues raised during the risk management reviews (TRA / ISA / PEN test / CIRA, Code scans/PIRT). Ensure as necessary the logging of identified issues as deficiencies, if mitigation will not be possible prior to project implementation and the associated risk is within the Banks risk appetite.
• Collaboration with relevant teams will be required.
• Provide Information Security risk consulting services to projects; to ensure all information security policies, standards and processes are embedded in the designed and delivered solutions.
• Any other related requests from Senior Management
• In consultation with the senior manager, develops a risk-based schedule for business as usual (BAU) baseline risk assessments; collaborating with respective technology and business owners to mitigate any significant issues identified.
• As requested by senior manager, reviews all contract and third-party arrangements to ensure that information security policies are adhered to, and that sufficient security protection will be afforded to information assets.

Sounds like your next step?

Meet the Team

TheHiveCareers

TheHiveCareers is an insurance organization that develops and manages comprehensive insurance products across life, health, and property & casualty lines. The company focuses on digital transformation, data-driven decision-making, and customer-centric product innovation to drive growth and competitive advantage. They operate with emphasis on regulatory compliance (including IFRS 17 standards), advanced analytics, and emerging technologies such as AI and embedded insurance solutions. The organization leverages analytics, automation, and digital channels to enhance operational efficiency and deliver seamless customer experiences across multiple distribution channels including agencies, bancassurance, and digital platforms.