Senior Cyber Risk & FedRAMP Compliance Leader

Blue Cross Blue Shield Association; Chicago (IL); On-site; USD 158,000 - 229,000; Full time

Benefits offered by this job

Paid time off

11 holidays

Medical/dental/vision insurance

401(k) matching

Lifestyle spending account

Job summary

Blue Cross Blue Shield Association seeks a seasoned Cyber Risk Program Leader to drive the development and execution of structured risk processes across the organization. The role scopes regulatory alignment, continuous monitoring, and audit readiness, especially for FedRAMP, while translating risks for technical and non-technical audiences.

The candidate will lead multiple projects, manage budgets and resources, and partner with IT leadership to ensure risk-informed decisions and ongoing

Qualifications

• Bachelor's degree in IT, info security, risk or related field, or equivalent work experience
• 10+ years career experience in IT or a closely related field
• Experience leveraging automation and AI-enabled solutions to improve compliance monitoring, reporting, and operational efficiency

Responsibilities

• Lead the creation and deployment of defined and structured processes to support the cyber risk program across the organization.
• Provide cyber risk leadership and guidance on project deliverables, budgets, and governance.
• Maintain risk registers, track security findings, and ensure alignment with business objectives.
• Champion cyber risk as a product across governance, risk, and compliance platforms with a clear vision and strategy.
• Communicate with senior management and stakeholders to escalate risks and drive timely decisions.

Skills

Leadership

Mentoring

Project management

Decision making

Communication with senior management

AI literacy

Regulatory understanding

Risk management

Change management

Education

Bachelor's degree in IT / information security / risk / IT management

Job description

Blue Cross Blue Shield Association seeks a seasoned Cyber Risk Program Leader to drive the development and execution of structured risk processes across the organization. The role scopes regulatory alignment, continuous monitoring, and audit readiness, especially for FedRAMP, while translating risks for technical and non-technical audiences.

The candidate will lead multiple projects, manage budgets and resources, and partner with IT leadership to ensure risk-informed decisions and ongoing