Information Security Risk Manager: Elevate Controls & Insight

Bloomberg; New York (NY); On-site; USD 160,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) match

Life insurance

Paid time off

Job summary

Bloomberg is seeking an Information Security Risk Manager to unite cybersecurity expertise with risk oversight. You will report to the Head of Information Security Risk in the Chief Risk Office and support independent oversight, credible challenge, and clear risk communications across the firm’s security program.

You will collaborate with Information Security, CISO, Engineering, Technology Risk, and Enterprise Risk Management to identify, assess, and resolve cybersecurity risks, translating

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 5+ years of relevant security risk experience.
• Ability to translate risks into actionable insights.
• Familiarity with NIST CSF, NIST 800-53, MITRE ATT&CK, ISO 27001, COBIT, or CIS.
• Strong written and verbal communication.
• Authorized to work in the United States.

Responsibilities

• Support Second Line oversight and credible challenge of cybersecurity risks across the organization.
• Assess security risks and advise on the design and effectiveness of security controls across technology initiatives and security programs.
• Review security programs and initiatives to assess alignment with enterprise risk standards, established security frameworks, and regulatory expectations.
• Partner with Information Security, CISO, Engineering, Technology Risk, and Enterprise Risk Management teams to strengthen risk awareness and control ownership.
• Analyze security findings, incidents, control weaknesses, and risk scenarios to identify themes, root causes, and opportunities for improvement.
• Develop practical recommendations to address identified security and control risks.
• Assist in developing cybersecurity risk assessments, reporting, metrics, and materials for management and governance forums.
• Monitor emerging cybersecurity threats, regulatory developments, and industry practices and assess their potential relevance to the organization.
• Participate in risk assessments of areas including cloud security, application security, identity and access management, cyber defense, vulnerability management, and cyber resilience.
• Build strong relationships across technical and risk teams and provide thoughtful, constructive challenge when appropriate.

Skills

Security risk management

Cybersecurity knowledge

Communication skills

Stakeholder management

Cross-functional collaboration

Regulatory awareness

Independent risk oversight

Education

Bachelor’s degree or equivalent professional experience

Tools

NIST CSF

NIST 800-53

MITRE ATT&CK

ISO 27001

COBIT

CIS

Job description

Bloomberg is seeking an Information Security Risk Manager to unite cybersecurity expertise with risk oversight. You will report to the Head of Information Security Risk in the Chief Risk Office and support independent oversight, credible challenge, and clear risk communications across the firm’s security program.

You will collaborate with Information Security, CISO, Engineering, Technology Risk, and Enterprise Risk Management to identify, assess, and resolve cybersecurity risks, translating