Manager Cyber Risk & GRC

Request Technology, LLC; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Request Technology, LLC is seeking a senior Cyber Risk Manager to lead a team of five and mature assurance services across governance, risk, and compliance. The role emphasizes security controls, KPIs, and alignment with regulatory requirements, including NIST, CMMC, and SOC standards.

Strong cloud expertise in Azure and Oracle is required. The ideal candidate will mentor staff, collaborate with security specialists and architects, and provide strategic guidance to senior leadership on cyber

Qualifications

• Experience with Azure and Oracle public cloud infrastructures.
• Ability to analyze business requirements and design cyber risk management capabilities.
• Strong communication and stakeholder management skills.
• Experience mentoring and leading teams of security professionals.
• Knowledge of regulatory requirements and security governance frameworks (e.g., NIST, ISO, HIPAA, SOC).

Responsibilities

• Develop processes and tooling to mature assurance service delivery.
• Collaborate with architects and leaders to align security with business objectives and regulations.
• Analyze risk exposure and design cyber risk management capabilities.
• Assess effectiveness of cybersecurity controls and guide remediation actions.
• Track issue status and report progress to leadership and governance bodies.
• Communicate risks and solutions to technical and non-technical audiences.

Skills

Azure

Oracle Cloud

GRC

NIST 800-53

CMMC

Leadership

Communication

Job description

***We are unable to sponsor as this is a permanent full-time role***

***REMOTE except for no Alaska, North Dakota, Nebraska, Hawaii, Oklahoma, Vermont, Maine, West Virginia, Wyoming, New Hampshire, Puerto Rico***

This role will manage 5 people and will need to possess strong technical background with heavy emphasis on assurance, audit, governance, grc, assessments, security controls, KPIs metrics, azure cloud, AIML to automate third party risk management, security event analytics, and develop/maintain internal frameworks NIST 800.53 800 ITIA CMMC NERC CIP CIS HIPAA OCC etc. SOC z fedramp iso.

Responsibilities

• Develop processes, maintain internal frameworks, create documentation templates, and implement tooling to support and mature assurance service delivery.
• Collaborate with security specialists, enterprise architects, and other technical leaders to ensure security solutions sufficiently mitigate risks and align with business objectives and regulatory requirements.
• Analyze risk exposure and consult on the design of cyber risk management capabilities where improvements are needed.
• Assess the effectiveness of cybersecurity capabilities, provide guidance on managing risks associated with ineffective controls, and influence decision-making by educating stakeholders.
• Track and report issue status, ensuring timely resolution of identified risks.
• Communicate cybersecurity risks and solutions to technical and non-technical audiences across all levels of management.
• Advise on enterprise-level decisions by presenting insights to senior leadership, including technology executives and governance bodies.
• Collaborate with legal, compliance, and audit teams to ensure alignment with regulatory expectations and contractual obligations.
• Maintain ongoing communication with leadership regarding developments in assigned areas and contribute to special projects as needed.
• Provide thought leadership and consulting support in the creation and maintenance of security-enabled processes across cybersecurity and technology teams.
• Mentor team members on technical topics, interpersonal dynamics, organizational policies, and enterprise operations.
• Partner with infrastructure, application, and data teams to ensure security controls are embedded across technology lifecycles and operational processes.
• Conduct regular risk assessments to ensure compliance with internal policies, external regulations, and industry standards; update unified requirements and document corrective actions.
• Define and track key performance indicators (KPIs) for cyber risk management capabilities, including issue closure rates, control effectiveness, and remediation timelines.
• Stay current with emerging threats, trends, and technologies, and provide strategic recommendations to enhance the organizations security posture.
• Contribute to the development and enforcement of cybersecurity policies, standards, and guidelines to ensure consistent and effective practices.
• Advise on the selection and implementation of security tools and technologies aligned with the cyber risk management strategy.

Qualifications

• Strong communication skills, with emphasis on active listening and clarity.
• Demonstrated empathy and ability to build trust within teams.
• Proven ability to research and maintain current technical knowledge in a rapidly evolving environment.
• Experience with Azure and Oracle public cloud infrastructures.
• Expertise in preparing business plans, IT strategies, technology roadmaps, and technical proposals.
• Ability to analyze business requirements and recommend timely, effective solutions.
• Demonstrated creativity and problem-solving skills in directing analysis and developing solutions.
• Knowledge of project development life cycle, with ability to coordinate and prioritize multiple initiatives.