Manager, Cybersecurity, Quantitative Risk - Remote

Stryker; United States; Remote; USD 176,000 - 294,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee stock purchase plan

Wellbeing program

Job summary

Stryker is seeking a Manager, Cybersecurity, Quantitative Risk to lead the development of quantitative methods for measuring cybersecurity risk across the enterprise. You will work with Cyber GRC, Strategy, Security Operations, ERM, Finance, and business leaders to inform investment priorities and risk reporting.

You will build risk models, dashboards, and KRIs, and translate insights into executive-level guidance.

Qualifications

• Bachelor's degree in a related discipline; 8+ years IT/cybersecurity experience.
• Minimum 5 years in cybersecurity risk management or a related discipline.
• Experience developing risk models, risk scoring methodologies, and quantitative reporting.
• Experience conducting cyber risk assessments and control evaluations.

Responsibilities

• Lead enterprise cyber risk quantification initiatives and establish a measurable view of risk exposure.
• Translate quantitative risk insights into recommendations for executives and governance forums.
• Partner across security, technology, finance, audit, compliance, ERM and business functions to support risk-informed decisions.

Skills

Cybersecurity

Risk management

Quantitative analysis

Data analytics

Communication

Education

Bachelor's degree in related field

Tools

FAIR

Monte Carlo

Risk modeling tools

Job description

Preference will be given to candidates residing in the Eastern or Central time zones. As a Manager, Cybersecurity, Quantitative Risk, you will lead the development and application of quantitative methods that measure, model, and communicate cybersecurity risk across the enterprise. You will partner with Cyber GRC, Cyber Strategy, Security Operations, Enterprise Risk Management, Finance, and business leaders to inform investment priorities, control effectiveness, cybersecurity strategy, and executive risk reporting.

What you will do:

• Lead enterprise cyber risk quantification initiatives and establish a consistent, measurable view of cybersecurity risk exposure.
• Translate quantitative risk insights into recommendations for executive leadership and governance forums.
• Partner across security, technology, finance, audit, compliance, enterprise risk, and business functions to support risk-informed decisions.

Technical Responsibilities:

• Develop and maintain quantitative cyber risk assessment methodologies, risk models, and scoring approaches.
• Measure and analyze cyber risk exposure across business units, products, technologies, and third-party environments.
• Perform scenario-based risk analyses, loss estimation, Monte Carlo analysis, and control effectiveness evaluations.
• Apply FAIR or similar methodologies to cyber risk quantification initiatives.
• Develop cyber risk dashboards, key risk indicators, quantitative reporting capabilities, and executive reporting mechanisms.
• Evaluate cybersecurity investments and remediation initiatives through risk reduction analyses.
• Conduct emerging risk assessments and trend analyses involving cyber threats, vulnerabilities, and control environments.
• Support regulatory, audit, governance, and cybersecurity strategy requirements through quantitative risk insights.

Knowledge and Capabilities:

• Apply cybersecurity frameworks, risk management principles, statistical modeling, and governance processes to enterprise risk analyses.
• Synthesize complex quantitative information into concise communications for executive and senior leadership audiences.
• Prioritize concurrent analyses, reporting needs, and deadlines while maintaining consistent risk measurement practices.

What You Need:

Required Qualifications

• Bachelor's degree in Cybersecurity, Risk Management, Statistics, Mathematics, Data Science, Information Systems, Finance, Engineering, or a related discipline.
• Minimum 8 years of professional experience in information technology or cybersecurity.
• Minimum 5 years of experience in cybersecurity risk management, quantitative risk analysis, enterprise risk, data analytics, or a related discipline.
• Experience conducting cyber risk assessments and control effectiveness evaluations.
• Experience developing risk models, risk scoring methodologies, quantitative reporting capabilities, and using data analytics or visualization tools.

Preferred Qualifications

• Training in quantitative risk analysis, statistical modeling, enterprise risk management, or cybersecurity risk management.
• Experience with FAIR, Monte Carlo analysis, risk modeling techniques, or similar methodologies.
• CRISC, CISSP, CISM, FAIR, Financial Risk Manager (FRM), or equivalent certification.

Posted Date: 09/14/2026 This role will be posted for a minimum of 3 days.

United States of America Pay Ranges:

• USN: $135,600 - $225,900 USD Annual
• US5: $142,400 - $237,200 USD Annual
• US10: $149,200 - $248,500 USD Annual
• US15: $155,900 - $259,800 USD Annual
• US20: $162,700 - $271,100 USD Annual
• US30: $176,300 - $293,700 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance. Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.