Manager, Cybersecurity, Quantitative Risk - Remote

Stryker; Kalamazoo (MI); On-site; USD 154,000 - 256,000; Full time

Benefits offered by this job

Health benefits package

401(k) plan

Employee Stock Purchase Plan

Wellbeing program

Job summary

Stryker in the United States seeks a Manager, Cybersecurity, Quantitative Risk to lead enterprise risk quantification and communicate insights to executives. You will work with Cyber GRC, Strategy, Security Operations, and Finance to inform investments and risk reporting.

The role requires 8+ years IT/cybersecurity and 5+ years in cybersecurity risk management, with experience in risk models, FAIR, Monte Carlo, and quantitative analytics. A strategic partner for governance.

Qualifications

• Bachelor's degree required in a relevant field.
• Minimum 8 years of professional IT/cybersecurity experience.
• Minimum 5 years in cybersecurity risk management or related.
• Experience developing risk models and scoring methodologies.
• Experience using data analytics or visualization tools.

Responsibilities

• Lead enterprise cyber risk quantification initiatives with measurable risk views.
• Translate quantitative insights into executive recommendations.
• Partner across security, technology, finance, audit, risk and business functions.

Skills

Quantitative risk analysis

Data analytics

Executive communication

Risk modeling

Project prioritization

Education

Bachelor's degree in Cybersecurity, Risk Management, Statistics, Mathematics, Data Science, Information Systems, Finance, Engineering, or related

Job description

Preference will be given to candidates residing in the Eastern or Central time zones.

As a Manager, Cybersecurity, Quantitative Risk, you will lead the development and application of quantitative methods that measure, model, and communicate cybersecurity risk across the enterprise. You will partner with Cyber GRC, Cyber Strategy, Security Operations, Enterprise Risk Management, Finance, and business leaders to inform investment priorities, control effectiveness, cybersecurity strategy, and executive risk reporting.

What you will do:

• Lead enterprise cyber risk quantification initiatives and establish a consistent, measurable view of cybersecurity risk exposure.
• Translate quantitative risk insights into recommendations for executive leadership and governance forums.
• Partner across security, technology, finance, audit, compliance, enterprise risk, and business functions to support risk-informed decisions.

Technical Responsibilities:

• Develop and maintain quantitative cyber risk assessment methodologies, risk models, and scoring approaches.
• Measure and analyze cyber risk exposure across business units, products, technologies, and third‑party environments.
• Perform scenario‑based risk analyses, loss estimation, Monte Carlo analysis, and control effectiveness evaluations.
• Apply FAIR or similar methodologies to cyber risk quantification initiatives.
• Develop cyber risk dashboards, key risk indicators, quantitative reporting capabilities, and executive reporting mechanisms.
• Evaluate cybersecurity investments and remediation initiatives through risk reduction analyses.
• Conduct emerging risk assessments and trend analyses involving cyber threats, vulnerabilities, and control environments.
• Support regulatory, audit, governance, and cybersecurity strategy requirements through quantitative risk insights.

Knowledge and Capabilities:

• Apply cybersecurity frameworks, risk management principles, statistical modeling, and governance processes to enterprise risk analyses.
• Synthesize complex quantitative information into concise communications for executive and senior leadership audiences.
• Prioritize concurrent analyses, reporting needs, and deadlines while maintaining consistent risk measurement practices.

What You Need:

Required Qualifications

• Bachelor's degree in Cybersecurity, Risk Management, Statistics, Mathematics, Data Science, Information Systems, Finance, Engineering, or a related discipline.
• Minimum 8 years of professional experience in information technology or cybersecurity.
• Minimum 5 years of experience in cybersecurity risk management, quantitative risk analysis, enterprise risk, data analytics, or a related discipline.
• Experience conducting cyber risk assessments and control effectiveness evaluations.
• Experience developing risk models, risk scoring methodologies, quantitative reporting capabilities, and using data analytics or visualization tools.

Preferred Qualifications

• Training in quantitative risk analysis, statistical modeling, enterprise risk management, or cybersecurity risk management.
• Experience with FAIR, Monte Carlo analysis, risk modeling techniques, or similar methodologies.
• CRISC, CISSP, CISM, FAIR, Financial Risk Manager (FRM), or equivalent certification.

United States of America Pay Ranges:

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.

Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.