Mgr Cybersecurity Program & Risk

blountfinefoods; Warren (RI); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, dental and vision benefits

401k with Company match

Paid time off

Education Assistance Program

Life Insurance and Short-Term Disability

Discounts on Blount products

Discretionary Annual Bonus Program

Job summary

Blount Fine Foods in Warren, RI is seeking a Cybersecurity Program & Risk Manager to own and advance the enterprise cybersecurity risk posture. This role involves shaping risk decisions and ensuring compliance across the organization.

The ideal candidate will have 7–10+ years of experience in cybersecurity, possess strong stakeholder management skills, and be able to translate technical risks into business terms. The position is fully onsite and offers a comprehensive benefits package.

Qualifications

• 7–10+ years of experience in cybersecurity, technology risk management, or enterprise risk roles.
• Ability to translate technical risk into executive-level business impact.
• Experience with third-party risk management, risk registers, audits, and compliance documentation.

Responsibilities

• Own the enterprise cybersecurity risk framework, including identification, assessment, prioritization, and mitigation.
• Prepare cybersecurity risk materials for leadership and governance committees.
• Own the enterprise security awareness and phishing simulation program.

Skills

Cybersecurity

Technology Risk Management

Stakeholder Management

Influence Without Authority

Understanding of NIST CSF

Risk Assessment

Education

7–10+ years of experience

Tools

ISO 27001

Multi-Entity Risk Models

Job description

Bringing our love of food to families for five generations! Blount Fine Foods is a family-owned and operated manufacturer, marketer, and developer of premium fresh prepared foods. We are an engaging team, bringing restaurant-quality products to America including single-serve grab-n-go fresh soups, mac & cheese, and entrées in grocery stores across the country, as well as for hot bars and restaurants. Help us create the finest food experiences including those with specialty certifications that include organic, gluten‑free, and low sodium, among others. Join a proven team for growth, success, and a satisfying career!

THIS OPPORTUNITY IS FULLY ONSITE AT OUR COROPRATE OFFICE IN WARREN, RI.

Job Summary

The Cybersecurity Program & Risk Manager is accountable for owning, integrating, and advancing the organization’s enterprise cybersecurity risk posture. This role goes beyond program coordination to actively shape risk decisions, influence executive leadership, and ensure cybersecurity risks are understood, prioritized, and managed in business terms. The position serves as the single point of accountability for cybersecurity risk management across governance, third‑party risk, workforce behavior, and compliance obligations.

Duties/Responsibilities

Enterprise Cybersecurity Risk & Program Ownership

• Own the enterprise cybersecurity risk framework, including identification, assessment, prioritization, and mitigation tracking.
• Maintain and mature the cybersecurity and technology risk register with clear risk statements, ownership, and mitigation plans.
• Develop and execute a multi‑year cybersecurity program roadmap aligned to business strategy.
• Facilitate cybersecurity maturity assessments and pragmatic improvement planning.

Third‑Party, Supply Chain & Subsidiary Risk Management

• Own cybersecurity risk management for third parties, suppliers, logistics partners, co‑manufacturers, and SaaS vendors.
• Define and enforce cybersecurity requirements in contracts and ensure evidence‑based compliance.
• Coordinate vendor risk assessments and remediation activities with Procurement and Legal.
• Ensure subsidiaries comply with corporate cybersecurity policies and minimum standards.

Governance, Executive Reporting & Assurance

• Prepare cybersecurity risk materials for leadership and governance committees.
• Translate cybersecurity risk into business, operational, and reputational impact.
• Support audits, assessments, and external reviews with defensible documentation.
• Develop dashboards and executive metrics to show risk posture and trend visibility.

Security Awareness, Training & Human Risk

• Own the enterprise security awareness and phishing simulation program.
• Analyze trends and recommend corrective actions to reduce human risk.
• Partner with HR and Communications to embed cybersecurity into company culture.

Enterprise Coordination Across Security Domains

• Maintain awareness across incident response, vulnerability management, IAM, and endpoint security.
• Coordinate security initiatives without owning day‑to‑day technical operations.
• Ensure clarity of ownership and risk coverage across teams and vendors.

Education and/or Experience

• 7–10+ years of experience in cybersecurity, technology risk management, or enterprise risk roles.
• Demonstrated ownership of cybersecurity or technology risk programs.
• Experience with third‑party risk management, risk registers, audits, and compliance documentation.
• Ability to translate technical risk into executive‑level business impact.
• Strong judgment, stakeholder management, and ability to influence without authority.
• Experience in manufacturing, food, CPG, or industrial environments.
• Practical experience with NIST CSF, ISO 27001, or similar frameworks.
• Exposure to multi‑entity or subsidiary operating models.
• Experience presenting risk to executive leadership or Boards.

Our Total Compensation Package Includes:

• Medical, dental and vision benefits.
• 401k with Company match.
• Paid time off including vacation, sick time and holidays.
• Education Assistance Program.
• Life Insurance and Short‑Term Disability.
• Discounts on Blount products at Company retail location.
• Discretionary Annual Bonus Program.