Manager, Cybersecurity Risk Management

W.R. Grace & Co.; Columbia (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Life Insurance

Disability

Wellness Program

Flexible Workplace

Retirement Plans

401(k) Company Match

Paid Vacation and Holidays

Tuition Reimbursement

Donation Match Program

Job summary

Grace, a Standard Industries company, is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team in Columbia, MD.

In this senior role, you will guide enterprise risk management across operating companies, lead risk assessments, and collaborate with IT and business leaders to strengthen controls and governance.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or related field.
• 5–8 years in cybersecurity, IT audit, or risk management.
• Experience with NIST CSF or ISO 27005.
• Strong communication and stakeholder influence skills.
• Willingness to travel up to 25%.

Responsibilities

• Lead enterprise cybersecurity risk management program across operating companies.
• Maintain risk registers and track remediation until resolution.
• Conduct advanced security control assessments for compliance and effectiveness.
• Advise on risk mitigation and control improvements with business leaders.
• Refine control frameworks, audit mechanisms, and monitoring processes.
• Manage third-party risk assessments and ongoing monitoring programs.
• Prepare risk reports, dashboards, and executive metrics.
• Mentor junior risk team members and support governance initiatives.

Skills

Information security

IT audit

Risk management

NIST CSF/ISO 27005

Communication

Cloud environments

Cross-functional leadership

Travel up to 25%

Education

Bachelor’s in IT/Cybersecurity

CISSP

CISM

CRISC

Tools

Governance, Risk, and Compliance platforms

IT Service Management platforms

Job description

Select how often (in days) to receive an alert:

Grace, a Standard Industries company, is a leading global supplier of catalysts, engineered materials and fine chemicals. We provide innovative products, technologies and services which our customers use to manufacture everyday products like renewable fuels, pharmaceuticals, toothpaste, cosmetics, food packaging, beer, edible oils and more. Our thousands of employees help shape a better future at our global headquarters in Columbia, MD and locations worldwide.

Job Description

Grace is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team! This role reports to Deputy CISO located at Columbia, MD.

We are looking for a strategic, highly skilled Cybersecurity Risk Manager to guide and enhance our cybersecurity risk management capabilities. In this senior role, you will serve as a trusted advisor to technology and business leaders, spearheading initiatives to identify, evaluate, and mitigate cybersecurity risks across Standard Industries.

• Lead the development, execution, and ongoing enhancement of the enterprise cybersecurity risk management program across operating companies under Standard Industries.
• Oversee the creation and maintenance of risk registers, ensuring risks are thoroughly documented, prioritized, and tracked until resolution.
• Conduct advanced security control assessments to measure effectiveness, ensure compliance, and align with internal and external standards.
• Collaborate with business units, IT leaders, and cybersecurity teams to provide expert guidance on risk mitigation strategies and improvements to controls.
• Drive the refinement of organization-wide control frameworks, audit mechanisms, and compliance monitoring processes.
• Manage and advance third-party risk management activities, including risk assessments, scoring, and continuous monitoring programs.
• Advise leadership on risk trends, new and emerging threats, and recommended controls by leveraging data-driven insights and professional expertise.
• Oversee the preparation and delivery of risk reports, dashboards, and metrics for executive stakeholders.
• Manage and mentor junior risk team members and support the development of cybersecurity governance and awareness initiatives.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related discipline; advanced degree or certifications such as CISSP, CISM, or CRISC are highly desirable.
• 5–8 years of professional experience in cybersecurity, IT audit, or risk management, demonstrating expertise with enterprise risk frameworks like NIST CSF or ISO 27005.
• Track record of performing in-depth control assessments, vendor risk evaluations, and security governance functions.
• Outstanding verbal, written, and interpersonal communication skills, with the ability to effectively influence stakeholders across all organizational levels.
• Strong analytical abilities and hands-on experience with enterprise IT and cloud-based environments.
• Proven capability to lead cross-functional projects and manage several priorities concurrently.
• Ability to travel up to 25% as needed

Preferred Qualifications

• Strong understanding of IT infrastructure, cloud environments, and associated technical controls
• Experience with Governance, Risk, and Compliance and IT Service Management platforms
• Demonstrated executive presence with the ability to effectively communicate with senior leadership, influence decision-making, and build trusted partnerships across business and technology functions.
• Life Insurance and Disability
• Grace Wellness Program
• Flexible Workplace with maximum overlap with the core hours
• Retirement Plans
• 401(k) Company Match
• Paid Vacation and Holidays
• Tuition Reimbursement
• Company Donation Match Program.

Grace is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at Grace via email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of Grace. No fee will be paid in the event the candidate is hired by Grace as a result of the referral or through other means.