Remote Cybersecurity Risk Governance Leader

HITEC; Columbus (IN); Remote; USD 131,000 - 161,000; Full time

Job summary

HITEC is seeking a Cybersecurity Risk Governance Principal to lead enterprise risk governance and drive strategic risk treatment across the organization. This remote role collaborates with governance, BRI, cyber threat intelligence, and business stakeholders to prioritize cyber risks and align with business objectives.

The role requires 5–7 years of cybersecurity experience with 3–5 years in risk management, strong knowledge of NIST RMF and FAIR, and certifications such as CISSP or CISM are

Qualifications

• Bachelor’s degree in cybersecurity, information technology, or related field.
• 5–7 years of cybersecurity experience with 3–5 years in risk management or enterprise risk management.
• Experience with risk governance processes, risk reporting, and treatment prioritization.
• Familiarity with risk frameworks and regulatory requirements; strong communication and collaboration skills.

Responsibilities

• Lead enterprise cyber risk governance, identifying, assessing and reporting risks.
• Coordinate cross-functional risk treatment with cybersecurity, legal, privacy, compliance and business units.
• Present risk posture to senior leadership and support ERM committees.
• Define governance for risk acceptance and exceptions; oversee funding paths and timelines.
• Mentor and develop teams; recruit and manage global teams to deliver value.

Skills

Risk governance leadership

Cross-functional risk orchestration

Business insight

Strategic planning

Executive communication

Education

Bachelor’s degree in cybersecurity / information technology

Tools

NIST RMF

FAIR

CISSP / CISM (preferred)

Job description

HITEC is seeking a Cybersecurity Risk Governance Principal to lead enterprise risk governance and drive strategic risk treatment across the organization. This remote role collaborates with governance, BRI, cyber threat intelligence, and business stakeholders to prioritize cyber risks and align with business objectives.

The role requires 5–7 years of cybersecurity experience with 3–5 years in risk management, strong knowledge of NIST RMF and FAIR, and certifications such as CISSP or CISM are