Senior Cyber Risk & Governance Leader

Candidate Experience site; New York (NY); Hybrid; USD 250,000 - 280,000; Full time

Benefits offered by this job

Health Insurance

Hybrid Environment

401(k) Savings Plan

Wellness Perks

Job summary

Tradeweb is seeking a Cyber Risk Manager to lead the cyber risk program within our Information Security team. You will assess risks, manage the second-line assurance program, and oversee third‑party cyber risks while collaborating with infrastructure, network, development, and business units.

The role requires extensive experience in cyber risk management, knowledge of frameworks like NIST/CIS/ISO, and the ability to communicate complex issues to stakeholders.

Qualifications

• 10+ years of relevant experience in cyber risk management.
• Knowledge of common frameworks and standards such as NIST, CIS, ISO.
• Experience with regulatory compliance (e.g., GDPR, RegSCI).
• Strong communication skills and ability to convey complex concepts.

Responsibilities

• Lead Cyber Security risk management within Enterprise Risk Management Framework.
• Coordinate cross-functional teams across technology, business, and governance groups.
• Maintain cyber risk register, control catalog, and policy documentation mappings.
• Develop and embed information security policy and framework across the company.
• Own third‑party cyber risk assessments for vendor engagements.
• Support cyber security audits and regulatory exams.

Skills

Cyber risk management

Cross-functional collaboration

Strong communication

Regulatory knowledge

Tools

NIST Framework

CIS Controls

ISO Standards

Job description

Tradeweb is seeking a Cyber Risk Manager to lead the cyber risk program within our Information Security team. You will assess risks, manage the second-line assurance program, and oversee third‑party cyber risks while collaborating with infrastructure, network, development, and business units.

The role requires extensive experience in cyber risk management, knowledge of frameworks like NIST/CIS/ISO, and the ability to communicate complex issues to stakeholders.