Principal Cyber Risk & Analytics Leader

Fidelity Investments Inc.; Durham (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Fidelity Investments Inc. in Durham is seeking a Principal-level cyber risk professional to lead the creation of cyber risk analyses for the ECS domain.

You will quantify risk, model threats, and present findings to both technical teams and senior leaders to support informed decision making. The role requires 3–5 years of risk experience, deep knowledge of NIST 800-53, CRI and FAIR, and strong communication skills.

Qualifications

• Minimum 3–5 years of risk experience quantifying cyber risk.
• Experience with cybersecurity risk management, assessment frameworks, and metrics reporting.
• Project management of end-to-end risk initiatives.
• Familiarity with governance, risk, and compliance tools.
• Advanced understanding of NIST 800-53, CRI, and FAIR.
• CRISC, CISSP, or CISM certifications preferred.
• Strong communication and presentation skills for senior leaders.
• Ability to quantify improvements in cyber risk position.

Responsibilities

• Lead development of cyber risk analyses for ECS risk areas.
• Participate in risk/threat modeling sessions to identify top risk scenarios.
• Advise on risk levels for exceptions and audit findings to reduce exposure.
• Quantify cyber risk and present to technical and executive audiences.
• Collaborate across business lines to implement risk controls and policy enhancements.

Skills

Cyber risk quantification

Threat modeling

Risk governance & compliance

NIST 800-53

CRI & FAIR

Project management

Data analysis & storytelling

Communication to senior leaders

Cross-functional collaboration

CRISC/CISSP/CISM preferred

Job description

Fidelity Investments Inc. in Durham is seeking a Principal-level cyber risk professional to lead the creation of cyber risk analyses for the ECS domain.

You will quantify risk, model threats, and present findings to both technical teams and senior leaders to support informed decision making. The role requires 3–5 years of risk experience, deep knowledge of NIST 800-53, CRI and FAIR, and strong communication skills.