Remote Cyber Risk Lead & Governance Expert

First Citizens Bank; Austin (TX); Remote; USD 120,000 - 180,000; Full time

Job summary

First Citizens Bank is seeking a senior Cyber Risk Manager to lead risk assessments and governance across the enterprise. You will partner with business and technology teams to identify, map, and mitigate cyber risks using established frameworks and industry guidance.

Responsibilities include applying CSF, NIST SP 800-53, ISO 27001, and FFIEC, communicating findings to leadership, guiding remediation efforts, and driving continuous improvement in risk management practices.

Qualifications

• Bachelor’s degree and 6 years’ information security experience, or 10 years with HS diploma/ GED.
• Experience performing cybersecurity risk assessments, including scoping, gap analysis, and reporting.
• Knowledge of CRI Profile, NIST CSF, NIST SP 800-53, ISO 27001, FFIEC guidance.
• Experience across IAM, security architecture, network and cloud security.
• Excellent written and oral communication skills; ability to influence stakeholders.
• Professional certifications such as CISSP, CISA, CISM, CRISC.

Responsibilities

• Lead and support cybersecurity maturity and risk assessments using CRI, CSF, NIST, ISO 27001, FFIEC.
• Identify risks across operational, technology, and regulatory domains and track remediation.
• Apply CSF, NIST SP 800-53, ISO 27001, FFIEC to assess risk posture and gaps.
• Provide insights on technical risk mitigation in IAM, network, cloud, and endpoints.
• Collaborate with stakeholders to communicate results and promote risk awareness.
• Develop and maintain risk reports and dashboards for leadership.
• Continuously improve risk assessment methodologies and practices.

Skills

Cybersecurity risk assessments

CSF/NIST/ISO27001/FFIEC

IAM

Security architecture

Risk communication

Vulnerability management

Regulatory requirements knowledge

Education

Bachelor's Degree

High School Diploma or GED

Job description

First Citizens Bank is seeking a senior Cyber Risk Manager to lead risk assessments and governance across the enterprise. You will partner with business and technology teams to identify, map, and mitigate cyber risks using established frameworks and industry guidance.

Responsibilities include applying CSF, NIST SP 800-53, ISO 27001, and FFIEC, communicating findings to leadership, guiding remediation efforts, and driving continuous improvement in risk management practices.