Principal Cyber Risk Analyst & Quantification Leader

Fidelity Investments; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Fidelity Investments seeks a Principal-level cyber risk professional to lead the creation of cyber risk analyses for the ECS program. You will participate in risk modeling, advise on exceptions and audit findings, and quantify risk to present to senior leadership.

You will gather data from multiple sources, integrate it into risk tools, and communicate insights across business lines in a fast-paced environment. Onsite with Fidelity’s phased regional rollout.

Qualifications

• Minimum 3-5 years of risk experience quantifying cyber risk and presenting data to senior leaders.
• Experience in cybersecurity risk management, assessment frameworks, and metrics reporting.
• Experience managing end-to-end projects, from data collection to tracking, maintenance, and closure, with data integrated into risk analysis tools.
• Use and understanding of governance, risk, and compliance tools.
• Advanced understanding of NIST 800-53, CRI, and FAIR.
• CRISC, CISSP, or CISM certifications are preferred.
• Strong communication and presentation skills to senior leaders.
• Ability to quantify work and risk position improvements through metrics.
• Critical thinking to vet answers and identify gaps.
• Ability to influence across business lines to mitigate cyber risk.
• Understanding risks in cloud security, access controls, encryption, vendor security, data exfiltration, app security, perimeter security, customer protection, privileged access, DoS, unpatched vulnerabilities, and end-of-life software.
• Operate in a fast-paced environment and integrate new cybersecurity data into risk models.
• Investigator mindset to communicate actionable risk to business and technology groups.
• Determining appropriate controls for cybersecurity risks.
• Working with asset inventory and asset management.
• Evaluate sources and trends to compare findings with ECS policies and identify gaps.
• Draft policy enhancements to close gaps and sustain progress.

Responsibilities

• Lead the creation of cyber risk analyses for ECS product areas.
• Participate in risk/threat modeling sessions to prioritize top risks.
• Advise on exceptions and audit finding risk levels to drive down exceptions and rate audit findings.
• Quantify cyber risk and present analyses to technical and executive audiences for informed decision-making.
• Integrate data from multiple sources and SMEs into risk analysis tools and communicate progress across teams.
• Work across business lines to influence change and mitigate cyber risk.

Skills

Cyber risk management

Executive-level reporting

Cross-functional collaboration

Risk data analysis

Project management

GRC tools

Education

CRISC/CISSP/CISM certifications preferred

Tools

GRC tools

Job description

Fidelity Investments seeks a Principal-level cyber risk professional to lead the creation of cyber risk analyses for the ECS program. You will participate in risk modeling, advise on exceptions and audit findings, and quantify risk to present to senior leadership.

You will gather data from multiple sources, integrate it into risk tools, and communicate insights across business lines in a fast-paced environment. Onsite with Fidelity’s phased regional rollout.