IT Risk Manager - Senior

TalentBurst; Framingham (MA); Remote; USD 110,000 - 150,000; Full time

Job summary

A leading company is seeking a Senior IT Risk Manager for a fully remote contract position. The ideal candidate will have over 10 years of experience in IT risk management, along with certifications in CISSP and CRISC. This role focuses on application risk assessment, governance, and compliance, requiring strong leadership to influence strategic direction within the organization.

Qualifications

• 10+ years of experience in IT risk management at a leadership level.
• CISSP preferred; CRISC certification required.
• Expertise in IT policies, laws, and standards.

Responsibilities

• Conduct application risk assessment and IT risk profiling.
• Manage IT risk strategies and compliance initiatives.
• Develop workflows and communicate IT risk management processes.

Skills

IT Governance

Risk Assessment

Cybersecurity

Compliance Management

Project Management

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

ServiceNow

GRC technology platforms

Job description

Title: Senior IT Risk Manager
Location: 100% REMOTE (must work EST hours)
Duration: 6+ Months Contract (Potential to extend)

Notes:
• 10 plus years' experience with IT risk at a management level (not managing people)
• Interview process: 2 rounds
• Looking for someone who is hands on doing the application risk assessment
• IT Risk & Control Assessment (identify, assessment, response, monitor the IT risk, etc.)

Job Description:

· Extensive experience and expertise in IT Governance, Risk, and Compliance Management, with at least 10+ years of progressive leadership in the areas of IT risk strategies/ cybersecurity/ business resiliency, principles, processes and deliverables.
· A bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent experience.
· Experience in developing and communicating new workflows and processes.
· Experience in performing IT risk profiling, IT risk assessment, treatment, monitoring, and reporting with an understanding of the legal implications of risk and compliance.
· Experience in managing GRC services and products to drive efficiency IT Risk Management program.
· Excellent understanding of modern IT Risk & Compliance concepts and methodologies.
· Excellent understanding of IT & Cyber principles, Cyber technology, project management, program strategy, and software development lifecycle.
· Strong knowledge of IT policies, laws, standards, and frameworks (e.g., ISO31000, ISO27000, PCI DSS, COSO, NIST).
· Knowledge of IT industry trends and emerging technologies.
· Ability to build strong relationships with senior leaders and influence strategic direction.

Required:
Certified Information Systems Security Professional (CISSP) (preferred over the others)
Certified in Risk and Information Systems Control (CRISC)

Preferences:
Familiarity will GRC technology platforms (e.g., ServiceNow, Archer, etc.)
ServiceNow Integrated Risk Management (IRM) tool (preferred)