Remote Cyber Risk & Policy Manager (FTC)

Zohorecruit; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Zohorecruit is seeking a Cyber Security Risk & Policy Manager for a 12-month FTC with remote work and travel to client sites. The role bridges technology, operations, compliance and leadership to align cyber resilience with regulatory requirements and business objectives.

You will develop risk frameworks, policies and metrics, while coordinating governance across IT, OT and business functions in a regulated environment.

Qualifications

• Strong knowledge of ISO 27001, ISO 27005, NIST, CIS Controls, and NCSC CAF.
• Experience performing cyber security risk assessments in regulated environments (Energy/Utilities, Finance, Healthcare).
• Background in IT systems architecture with familiarity of OT/SCADA/ICS.
• Experience delivering governance and cross-functional risk programs under pressure.
• Relevant degree or professional certifications (CISM, CRISC, CISSP, ISO 27001 LA/LI) or equivalent.

Responsibilities

• Develop and manage the enterprise cyber security risk management framework.
• Create and align cyber security policies with business needs.
• Support audits and compliance deliverables under NIS Regulations and NCSC CAF.
• Engage IT, Digital, and OT teams to track risk mitigation and embed security in design.
• Design and report cyber risk metrics and KPIs.

Skills

Risk management

Policy development

Stakeholder engagement

Regulatory compliance

Cyber security

Education

CISM

CRISC

CISSP

ISO 27001 LA/LI

Job description

Zohorecruit is seeking a Cyber Security Risk & Policy Manager for a 12-month FTC with remote work and travel to client sites. The role bridges technology, operations, compliance and leadership to align cyber resilience with regulatory requirements and business objectives.

You will develop risk frameworks, policies and metrics, while coordinating governance across IT, OT and business functions in a regulated environment.