Manager, Technology & Cybersecurity Risk / Risk Data Analyst

Genworth; Richmond (VA); Hybrid; USD 109,000 - 169,000; Full time

Benefits offered by this job

Healthcare Coverage

Multiple 401(k) Options

12+ Paid Holidays

Job summary

Genworth in Richmond, VA is hiring a Technology & Cybersecurity Risk leader to modernize enterprise risk management. You will develop Power BI dashboards, Power Automate workflows, and AI-enabled approaches to convert risk data into actionable insights.

The role features executive storytelling and risk challenge to improve controls across technology, cybersecurity, and third‑party environments. The hybrid role is based in Rich mond, VA with in-office days Tue–Thu, 9am–5pm EST, and requires

Qualifications

• 5+ years of experience in technology/cyber risk or risk analytics.
• Experience conducting risk assessments and remediation activities.
• Familiarity with risk and control frameworks such as NIST, ISO, and SOC.
• Strong Power BI skills including dashboarding and data modeling.
• Advanced Microsoft Excel for analytics and data manipulation.
• Excellent executive storytelling and business communication.

Responsibilities

• Lead enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments.
• Identify, evaluate, and prioritize risks related to availability, security, resilience, and data integrity.
• Maintain and manage the technology risk register, including risk identification, scoring, and remediation tracking.
• Evaluate IT general controls (ITGCs) and application controls for design and effectiveness.
• Align risk practices to NIST, ISO 27001, COBIT, SOC 2, and CIS Controls.
• Partner with Technology and Security teams to drive control improvements and remediation.
• Develop KRIs and support executive risk reporting and dashboards.
• Build and maintain Power BI dashboards for risk registers, KRIs, and vendor risk metrics.
• Design Power Automate workflows to streamline risk processes from assessments to reporting.
• Utilize AI/generative AI for enhanced reporting and risk analysis.

Skills

Power BI

Excel

PowerPoint

Executive storytelling

Communication

Risk assessment

Education

Bachelor’s degree in IT / Cybersecurity

Tools

Power Automate

ServiceNow GRC

Archer

OneTrust

AWS

Azure

GCP

SQL

Python

PowerShell

Job description

Genworth is hiring a Technology & Cybersecurity Risk leader in Richmond, VA (hybrid) to strengthen how the organization identifies, assesses, monitors, and reports enterprise risk. You will modernize risk management through Power BI dashboards, Power Automate workflows, and AI-enabled approaches, helping teams turn risk data into actionable insights. The role also includes executive-ready storytelling and risk challenge to improve controls across technology, cybersecurity, and third-party environments.

Hybrid schedule: In-office days are Tuesday, Wednesday, and Thursday, with working hours targeting 9am–5pm EST. This position is available to Virginia residents with Richmond, Virginia in-office applicants.

What you’ll do

• Lead and execute enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments.
• Identify, evaluate, and prioritize risks related to availability, security, resilience, and data integrity.
• Maintain and manage the technology risk register, including risk identification, scoring, and remediation tracking.
• Evaluate and challenge IT general controls (ITGCs) and application controls, ensuring design and effectiveness.
• Align risk and control practices to industry standards such as NIST, ISO 27001, COBIT, SOC 2, and CIS Controls.
• Partner with Technology and Security teams to drive control improvements and remediation of identified risks.
• Support definition of risk appetite and tolerance, including development and monitoring of key risk indicators (KRIs).
• Provide independent oversight and challenge to ensure risks are identified and managed within technology initiatives, projects, and change efforts.
• Support regulatory, audit, and compliance activities by providing documentation, evidence, and subject matter expertise.
• Monitor emerging technology and cybersecurity risks (for example, cloud, AI, cyber threats) and translate them into actionable mitigation strategies.
• Conduct cybersecurity risk assessments for enterprise environments across on-prem, cloud, and hybrid.
• Assess cybersecurity controls across IAM, data protection and encryption, network and endpoint security, and incident response capabilities.
• Oversee vulnerability management activities, including penetration testing and remediation tracking.
• Support cyber incident readiness activities such as tabletop exercises and post-incident reviews.
• Develop cybersecurity KRIs and deliver executive reporting, including clear PowerPoint narratives.
• Collect, validate, and analyze risk data from multiple sources, including GRC tools, security platforms, and vendor systems.
• Build and maintain Power BI dashboards for risk registers, KRIs, vendor risk metrics, and trend analysis.
• Design and implement Power Automate workflows to streamline risk processes such as assessments, approvals, and reporting.
• Use AI and Generative AI tools to enhance reporting, summarization, and analysis, and support responsible AI use by identifying and mitigating risks such as data privacy, bias, and accuracy.

What you bring

• 5+ years of experience in one or more of: Technology / Cyber Risk, Risk Management / GRC, or Risk Data Analytics.
• Experience conducting risk assessments and managing remediation activities.
• Familiarity with risk and control frameworks such as NIST, ISO, and SOC.
• Strong Power BI skills, including dashboarding and data modeling.
• Advanced Microsoft Excel skills for analytics and data manipulation.
• Advanced PowerPoint skills for executive presentations.
• Experience building dashboards, reports, and risk analytics, and translating data into actionable insights.
• Experience using Power Automate or similar workflow automation tools.
• Familiarity with AI / Generative AI tools to improve productivity and analysis.
• Experience leveraging APIs to access, share, and aggregate data.
• Strong written and verbal communication skills, including executive-level storytelling.
• Ability to translate technical concepts into business-friendly language.
• Bachelor’s degree in a related field such as Information Technology, Cybersecurity, Computer Science, Business, Risk Management, Finance, or a related field.

Tools and frameworks you’ll work with

• Power BI, Power Automate, PowerPoint
• AI-enabled solutions, AI and Generative AI tools
• NIST, ISO 27001, COBIT, SOC 2, CIS Controls
• NIST CSF, NIST 800-53, ISO 27002
• GRC tools (including ServiceNow GRC, Archer, OneTrust)
• AWS, Azure, GCP
• SQL, Python, PowerShell

Compensation and incentives

• Salary range: $109,000 – $169,000 per year (national range)
• Eligible for a bonus incentive plan in addition to base salary; incentive compensation is based on individual and company performance and is not guaranteed.

Benefits at Genworth

• Comprehensive Healthcare Coverage
• Multiple 401(k) Savings Plan Options
• Auto Enrollment in employer-directed retirement account feature (100% employer-funded)
• Generous Paid Time Off including 12 Paid Holidays, Volunteer Time Off, and Paid Family Leave
• Disability, Life, and Long Term Care Insurance
• Tuition Reimbursement, Student Loan Repayment, and Training & Certification Support
• Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
• Caregiver and Mental Health Support Services
• Competitive Compensation & Total Rewards Incentives

Nice to have

• Professional certifications such as CISA, CRISC, CISM, CISSP, CTPRP, or PMP
• Master’s degree (MBA, MS Cybersecurity, or related field)
• Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust)
• Knowledge of cloud platforms (AWS, Azure, GCP)
• Experience with scripting or data tools (SQL, Python, PowerShell)
• Experience presenting to senior leadership or risk committees

Additional details

This role is not eligible for employment visa sponsorship.