InfoSec Risk Manager: Strategic Oversight

Bloomberg L.P.; New York, Northern (NY, KY); Hybrid; USD 160,000 - 215,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Short & long-term disability benefits

401(k) + match

Life insurance

Wellness programs

Disability inclusive employer

Job summary

Bloomberg L.P. is seeking an Information Security Risk Manager in New York to lead second-line risk oversight across cybersecurity and information security programs. You will translate complex security risks into actionable insights for technology and business leaders.

You will partner with CISO, Engineering, and risk teams to strengthen controls, assess cloud and application security, and monitor evolving threats and regulatory changes. Strong communication and collaboration are essential.

Qualifications

• Bachelor’s degree or equivalent professional experience.
• 5+ years of relevant experience across Security Engineering, Security Architecture, Application Security, Cyber Defense, or a related technical discipline.
• Working knowledge of cybersecurity risks, controls, and security principles.
• Experience assessing technology or security risks and communicating findings and recommendations to stakeholders.
• Familiarity with one or more cybersecurity or technology control frameworks, such as NIST CSF, NIST 800-53, MITRE ATT&CK, ISO 27001, COBIT, or CIS.
• Strong written and verbal communication skills, including the ability to explain technical risks to both technical and non-technical audiences.
• Ability to work collaboratively across technology, security, and risk teams.
• Authorized to work in the United States.

Responsibilities

• Support Second Line oversight and credible challenge of cybersecurity and information security risks across the organization.
• Assess security risks and consult on the design and effectiveness of security controls across technology initiatives and security programs.
• Review security programs and initiatives to assess alignment with enterprise risk standards, established security frameworks, and regulatory expectations.
• Partner with Information Security, CISO, Engineering, Technology Risk, and Enterprise Risk Management teams to strengthen risk awareness, accountability, and control ownership.
• Analyze security findings, incidents, control weaknesses, and risk scenarios to identify themes, root causes, and opportunities for improvement.
• Develop practical recommendations to address identified security and control risks.
• Assist in developing cybersecurity risk assessments, reporting, metrics, and materials for management and governance forums.
• Monitor emerging cybersecurity threats, regulatory developments, and industry practices and assess their potential relevance to the organization.
• Participate in risk assessments of areas including cloud security, application security, identity and access management, cyber defense, vulnerability management, and cyber resilience.
• Build strong relationships across technical and risk teams and provide thoughtful, constructive challenge when appropriate.

Skills

Security engineering

Security architecture

Application security

Cyber defense

Communication

Analytical skills

Regulatory knowledge

Risk management

US work authorization

Education

Bachelor's degree

Job description

Bloomberg L.P. is seeking an Information Security Risk Manager in New York to lead second-line risk oversight across cybersecurity and information security programs. You will translate complex security risks into actionable insights for technology and business leaders.

You will partner with CISO, Engineering, and risk teams to strengthen controls, assess cloud and application security, and monitor evolving threats and regulatory changes. Strong communication and collaboration are essential.