Principal Cyber Risk Architect

Fidelity Investments; North Carolina; On-site; USD 140,000 - 190,000; Full time

Job summary

Fidelity Investments seeks a Principal-level cyber risk professional to lead in the creation of cyber risk analysis for ECS. You will quantify risk, participate in threat modeling, and present findings to senior leaders to inform decisions.

Role requires cross-functional collaboration and strong data-driven communication across multiple lines. The role emphasizes end-to-end project management, governance, and an advanced understanding of NIST 800-53, CRI, and FAIR, with CRISC/CISSP/CISM

Qualifications

• 3–5 years quantifying cyber risk and presenting data to senior leaders.
• Experience in cybersecurity risk management, assessment frameworks, and metrics.
• End-to-end project delivery from data gathering to closure and reporting.
• Knowledge of governance, risk, and compliance tools.
• Advanced understanding of NIST 800-53, CRI, and FAIR.
• CRISC, CISSP, or CISM preferred.

Responsibilities

• Lead creation of cyber risk analysis for ECS Product Areas.
• Participate in risk/threat modeling to prioritize top risks.
• Advise on exceptions and audit findings to reduce risk and noise.
• Quantify cyber risk and present analyses to technical and executive audiences.
• Integrate data from multiple sources into risk models and tools.
• Collaborate across business lines to influence risk reduction.

Skills

Cyber risk management

Data visualization

Project management

Governance, risk, compliance tools

NIST 800-53

CRI / FAIR

Communication to senior leaders

Issue tracking & risk-based decision

Cloud security concepts

Threat modeling

Job description

Fidelity Investments seeks a Principal-level cyber risk professional to lead in the creation of cyber risk analysis for ECS. You will quantify risk, participate in threat modeling, and present findings to senior leaders to inform decisions.

Role requires cross-functional collaboration and strong data-driven communication across multiple lines. The role emphasizes end-to-end project management, governance, and an advanced understanding of NIST 800-53, CRI, and FAIR, with CRISC/CISSP/CISM