Manager, Cybersecurity Risk Management

W. R. Grace; Columbia (MD); On-site; USD 125,000 - 172,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

Life Insurance & Disability

Grace Wellness Program

401(k) Company Match

Paid Vacation & Holidays

Parental Leave

Tuition Reimbursement

Company Donation Match Program

Job summary

Grace, a Standard Industries company, is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team in Columbia, MD. This senior role provides strategic guidance to technology and business leaders, spearheading initiatives to identify, evaluate, and mitigate cybersecurity risks across Standard Industries.

You will oversee risk management program development, risk registers, control assessments, and third‑party risk activities, while mentoring junior staff and

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field.
• 5–8 years in cybersecurity, IT audit, or risk management with enterprise risk frameworks like NIST CSF or ISO 27005.
• Proven experience in control assessments, vendor risk, and governance functions.
• Strong written and verbal communication for diverse stakeholders.
• Ability to travel up to 25% as needed.

Responsibilities

• Lead enterprise cybersecurity risk management program development and execution.
• Maintain risk registers and track risks to resolution.
• Perform advanced security control assessments and ensure compliance.
• Advise on risk mitigation and control improvements with business units.
• Lead third‑party risk assessments and continuous monitoring.
• Present risk reports and metrics to executives.
• Mentor junior risk staff and support governance initiatives.

Skills

Cybersecurity risk management

Risk assessment

Vendor risk management

Communication

Analytical thinking

Education

Bachelor’s degree in IT/Cybersecurity or related

CISSP/CISM/CRISC desirable

Tools

NIST CSF

ISO 27005

Job description

Annual Wage Range: $125,248.00 - $172,216.00

Other Compensation: Eligibility for the Short-Term Incentive program and other applicable bonuses

Benefits: U.S. Employee Benefits Summary (grace.com)

Grace, a Standard Industries company, is a leading global supplier of catalysts, engineered materials and fine chemicals. We provide innovative products, technologies and services which our customers use to manufacture everyday products like renewable fuels, pharmaceuticals, toothpaste, cosmetics, food packaging, beer, edible oils and more. Our thousands of employees help shape a better future at our global headquarters in Columbia, MD and locations worldwide.

Job Description

Grace is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team! This role reports to Deputy CISO located at Columbia, MD. We are looking for a strategic, highly skilled Cybersecurity Risk Manager to guide and enhance our cybersecurity risk management capabilities. In this senior role, you will serve as a trusted advisor to technology and business leaders, spearheading initiatives to identify, evaluate, and mitigate cybersecurity risks across Standard Industries.

Responsibilities

• Lead the development, execution, and ongoing enhancement of the enterprise cybersecurity risk management program across operating companies under Standard Industries.
• Oversee the creation and maintenance of risk registers, ensuring risks are thoroughly documented, prioritized, and tracked until resolution.
• Conduct advanced security control assessments to measure effectiveness, ensure compliance, and align with internal and external standards.
• Collaborate with business units, IT leaders, and cybersecurity teams to provide expert guidance on risk mitigation strategies and improvements to controls.
• Drive the refinement of organization-wide control frameworks, audit mechanisms, and compliance monitoring processes.
• Manage and advance third‑party risk management activities, including risk assessments, scoring, and continuous monitoring programs.
• Advise leadership on risk trends, new and emerging threats, and recommended controls by leveraging data‑driven insights and professional expertise.
• Oversee the preparation and delivery of risk reports, dashboards, and metrics for executive stakeholders.
• Manage and mentor junior risk team members and support the development of cybersecurity governance and awareness initiatives.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related discipline; advanced degree or certifications such as CISSP, CISM, or CRISC are highly desirable.
• 5–8 years of professional experience in cybersecurity, IT audit, or risk management, demonstrating expertise with enterprise risk frameworks like NIST CSF or ISO 27005.
• Track record of performing in‑depth control assessments, vendor risk evaluations, and security governance functions.
• Outstanding verbal, written, and interpersonal communication skills, with the ability to effectively influence stakeholders across all organizational levels.
• Strong analytical abilities and hands‑on experience with enterprise IT and cloud‑based environments.
• Proven capability to lead cross‑functional projects and manage several priorities concurrently.
• Ability to travel up to 25% as needed

Preferred Qualifications

• Strong understanding of IT infrastructure, cloud environments, and associated technical controls
• Experience with Governance, Risk, and Compliance and IT Service Management platforms
• Demonstrated executive presence with the ability to effectively communicate with senior leadership, influence decision‑making, and build trusted partnerships across business and technology functions.

Benefits

• Medical, Dental, Vision Insurance
• Life Insurance and Disability
• Grace Wellness Program
• Flexible Workplace with maximum overlap with the core hours
• Retirement Plans
• 401(k) Company Match
• Paid Vacation and Holidays
• Parental Leave
• Tuition Reimbursement
• Company Donation Match Program.

Grace is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at Grace via email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of Grace. No fee will be paid in the event the candidate is hired by Grace as a result of the referral or through other means.

Nearest Major Market: Baltimore