Remote Enterprise Cyber Risk Leader

UNFI; Providence (RI); Remote; USD 130,000 - 180,000; Full time

Benefits offered by this job

401K program

Medical, dental, vision insurance

Paid time off

Job summary

UNFI is seeking a Principal Cyber Risk Analyst to lead the organization’s enterprise cyber risk management program. You will identify, assess, prioritize, and report technology risks, advising technology, cybersecurity, and business leadership to support decision-making and regulatory compliance.

You will partner with security, technology, and business teams to drive remediation progress, measure risk reduction, and communicate risk posture to executive governance committees.

Qualifications

• 10+ years of progressive cybersecurity and risk management experience.
• Experience leading enterprise cyber risk assessments.
• Experience with regulatory compliance initiatives (SOX, HIPAA, PCI-DSS, NIST, ISO 27001).
• Ability to translate technical risk to business terms for executives.
• Mentor analysts and lead enterprise risk governance programs.

Responsibilities

• Lead identification, assessment, and prioritization of technology and cybersecurity risks across enterprise.
• Maintain enterprise cyber risk register, quantify and report risks.
• Provide guidance on emerging technology risks, threat trends, and control weaknesses.
• Translate risks into business narratives and mitigation strategies.
• Lead risk review meetings with technology and business leaders to ensure remediation or escalation.

Skills

NIST CSF

NIST RMF

COBIT

ISO 27001

CIS Controls

FAIR

Risk governance

KRIs

Executive reporting

Stakeholder management

Education

Bachelor's degree in Cybersecurity / IT

CISSP

CRISC

CISM

CGEIT

CISA

FAIR Certification

Tools

GRC platforms

Audit tools

Job description

UNFI is seeking a Principal Cyber Risk Analyst to lead the organization’s enterprise cyber risk management program. You will identify, assess, prioritize, and report technology risks, advising technology, cybersecurity, and business leadership to support decision-making and regulatory compliance.

You will partner with security, technology, and business teams to drive remediation progress, measure risk reduction, and communicate risk posture to executive governance committees.