Principal Cybersecurity Risk Leader

Fidelity Investments Inc.; North Carolina; On-site; USD 140,000 - 170,000; Full time

Job summary

Fidelity Investments Inc. is seeking an experienced Principal-level risk professional to lead cyber risk analyses within the ECS Cyber Risk team.

You will quantify cyber risk, present data to senior leaders, and advise on exceptions and audit findings to reduce risk exposure. You will work cross-functionally, integrating data from multiple sources into risk tools, driving progress across lines and levels, and communicating actionable risk to business and technology groups in a fast-paced

Qualifications

• 3–5 years of risk experience quantifying cyber risk and presenting data to senior leaders.
• Experience with cybersecurity risk management, assessment frameworks, and metrics reporting.
• End-to-end project management from data collection to risk analysis and communication across lines.
• Familiarity with governance, risk, and compliance tools.
• Advanced understanding of NIST 800-53, CRI, and FAIR.
• CRISC, CISSP, or CISM certifications preferred.

Responsibilities

• Lead in creating cyber risk analyses for ECS Product Areas.
• Quantify cyber risk and present analyses to technical and executive audiences.
• Advise on risk levels for exceptions and audit findings.
• Integrate data into risk analysis tools and track progress.
• Collaborate across business lines to influence risk mitigation.

Skills

Cyber risk analysis

Data presentation to senior leaders

Project management

Governance, risk, and compliance tools

Communication skills

Critical thinking

Cross-functional collaboration

Investigator mindset

Tools

NIST 800-53 framework

CRI

FAIR

Job description

Fidelity Investments Inc. is seeking an experienced Principal-level risk professional to lead cyber risk analyses within the ECS Cyber Risk team.

You will quantify cyber risk, present data to senior leaders, and advise on exceptions and audit findings to reduce risk exposure. You will work cross-functionally, integrating data from multiple sources into risk tools, driving progress across lines and levels, and communicating actionable risk to business and technology groups in a fast-paced