Senior Cyber Risk Manager

Avantdigitalnow; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading technology firm is seeking a Senior Cyber Risk Manager to oversee technology-related risks within the organization. This role requires 10+ years of experience in technology risk management and strong qualifications in cybersecurity. You will collaborate with various teams to develop and implement risk mitigation strategies while ensuring compliance with relevant regulations and industry standards. Excellent communication and leadership skills are essential for engaging stakeholders and driving results.

Qualifications

• 10+ years of experience in technology risk management or cybersecurity roles.
• Proven expertise in developing risk management frameworks.
• Strong understanding of regulatory standards related to technology risk.

Responsibilities

• Conduct assessments of technology risks associated with systems and infrastructure.
• Analyze internal and external risk factors.
• Develop risk models and frameworks to prioritize technology risks.
• Implement technology risk policies and standards.
• Ensure compliance with laws and guidelines in technology risk management.
• Collaborate with IT and security teams for risk mitigation.

Skills

Technology risk assessments

Cybersecurity

Risk management frameworks

Analytical skills

Communication skills

Leadership

Education

Bachelor's degree in IT, Computer Science, or related field

Professional certification (e.g., CISA, CISSP, CRISC)

Job description

Job Description:

Contract Duration - 12 months

Contract type - Contract/ C2C

Job Description:

As the Senior Cyber Risk Manager, you will be responsible for overseeing the identification, assessment, mitigation, and monitoring of technology-related risks within the organization. You will play a pivotal role in ensuring our technology infrastructure remains secure, compliant, and resilient to emerging threats and vulnerabilities. The successful candidate will collaborate closely with cross-functional teams, including IT, security, compliance, and business units, to develop and implement robust risk management strategies and frameworks.

Responsibilities

• Conduct comprehensive assessments of technology risks associated with the organization's systems, applications, networks, and infrastructure.
• Analyze internal and external risk factors, including emerging threats, regulatory requirements, industry trends, and best practices.
• Develop risk models, metrics, and frameworks to quantify and prioritize technology risks effectively.
• Develop and implement technology risk policies, standards, and procedures in alignment with regulatory requirements and industry standards.
• Ensure compliance with applicable laws, regulations, and guidelines governing technology risk management and information security.
• Monitor regulatory developments and emerging trends to update policies and procedures accordingly.
• Collaborate with IT and security teams to identify and implement adequate controls and safeguards to mitigate technology risks.
• Evaluate the effectiveness of existing controls and recommend enhancements or modifications as needed.
• Facilitate risk mitigation efforts by implementing technical solutions, process improvements, and employee training programs.
• Serve as a trusted advisor to senior management and business stakeholders on technology risk matters, providing timely updates and recommendations.
• Communicate risk assessment findings, trends, and recommendations through comprehensive reports, presentations, and dashboards.
• Foster a culture of risk awareness and accountability across the organization through training, awareness campaigns, and knowledge-sharing initiatives.

Qualifications

• Bachelor's degree in information technology, Computer Science, Risk Management, or a related field; advanced degree or professional certification (e.g., CISA, CISSP, CRISC) Mandatory.
• Minimum of 10 years of experience in technology risk management, cybersecurity, or information security roles.
• Proven expertise in conducting technology risk assessments, developing risk management frameworks, and implementing controls and mitigation strategies.
• In-depth knowledge of regulatory requirements, industry standards, and best practices related to technology risk management and information security (e.g., FAIR, NIST Cybersecurity Framework, ISO 31000, OCTAVE & TARA).
• Strong analytical, problem-solving, and decision-making skills with the ability to evaluate complex issues and develop practical solutions.
• Excellent communication and interpersonal skills with the ability to effectively engage and influence stakeholders at all levels of the organization.
• Demonstrated leadership abilities with a track record of driving results, managing projects, and leading cross-functional teams in a fast-paced, dynamic environment.

Basic Requirements

• Effective verbal and non-verbal communication skills at all levels of the organization