Senior Cyber Risk & Governance Lead

Inpo External; Atlanta (GA); On-site; USD 110,000 - 150,000; Full time

Job summary

INPO seeks a Senior IT Security Analyst to act as the organization's cybersecurity risk authority, combining strategic oversight with hands-on risk management. You will mature the cybersecurity program, align with NIST CSF 2.0 and AI RMF, and translate complex risks into actionable plans for executives.

Expect extensive collaboration across IT, risk, audits, and leadership. Responsibilities include managing the risk register, third‑party risk, audits, and reporting on risk posture, while

Qualifications

• Six or more years of professional work experience.
• Four or more years in risk management, audit, or cybersecurity governance in regulated industries.
• Executive reporting and stakeholder management experience with C-suite and Board-level presentations.

Responsibilities

• Matures INPO's cybersecurity program aligning governance, controls, and reporting with NIST CSF 2.0 and NIST AI RMF.
• Maintains IT risk register and tracks assessment and remediation across IT.
• Oversees third‑party risk across SaaS, service providers, and supply chain.
• Coordinates audits, examinations, training, and independent assessments.
• Translates technical risks into executive‑level insights for prioritization and funding.
• Produces monthly metrics and quarterly risk posture reports.

Skills

Cybersecurity risk management

Governance and compliance

Executive reporting

Communication with stakeholders

Cross-functional collaboration

Education

Bachelor's degree in cybersecurity, computer science, information technology, information assurance, network engineering or network security

CRISC

CISM

CISSP

Tools

Qualys

ServiceNow GRC

X-Analytics

Job description

INPO seeks a Senior IT Security Analyst to act as the organization's cybersecurity risk authority, combining strategic oversight with hands-on risk management. You will mature the cybersecurity program, align with NIST CSF 2.0 and AI RMF, and translate complex risks into actionable plans for executives.

Expect extensive collaboration across IT, risk, audits, and leadership. Responsibilities include managing the risk register, third‑party risk, audits, and reporting on risk posture, while