Senior Cybersecurity Risk & Governance Lead

Mortgage-Trade-Holding-Company,-LL; Oxford (MS); On-site; USD 110,000 - 150,000; Full time

Job summary

mTrade is seeking a Senior Cybersecurity Risk & Governance Analyst to strengthen our information security GRC program. You will assess cyber risks across the organization, coordinate third-party risk, and support customer due diligence, audits, and governance initiatives.

You will report to the CISO and collaborate with Technology, Compliance, Legal, and Internal Audit teams. The role emphasizes regulatory alignment, cloud security, and executive risk reporting in a fast-paced environment.

Qualifications

• Bachelor's degree in Cybersecurity or related field; 5+ years in cybersecurity risk management, governance, or audit.
• Experience with regulated industries (financial services, fintech, banking).
• Ability to conduct risk assessments and manage risk registers.
• Experience responding to customer security questionnaires & audit inquiries.
• Experience reviewing SOC 1/2 reports & vendor due diligence materials.
• Familiarity with frameworks (NIST CSF, ISO 27001, SOC 2, PCI DSS).
• Proficient with cloud security concepts and Microsoft Azure.

Responsibilities

• Maintain and enhance the organization's cybersecurity GRC program.
• Conduct risk assessments for systems, processes, and cloud services.
• Track KRIs and remediation activities; support policy development.
• Coordinate third-party risk management and vendor due diligence.
• Prepare executive risk summaries and governance reports.
• Support customer security questionnaires and audits.

Skills

Cybersecurity risk management

Regulatory compliance

Communication skills

Analytical thinking

Cloud governance

Education

Bachelor's degree in Cybersecurity, Information Systems, Information Security, Risk Management, Business, Finance, Accounting, or related field

Tools

Azure

ServiceNow GRC

Archer

LogicGate

AuditBoard

Job description

mTrade is seeking a Senior Cybersecurity Risk & Governance Analyst to strengthen our information security GRC program. You will assess cyber risks across the organization, coordinate third-party risk, and support customer due diligence, audits, and governance initiatives.

You will report to the CISO and collaborate with Technology, Compliance, Legal, and Internal Audit teams. The role emphasizes regulatory alignment, cloud security, and executive risk reporting in a fast-paced environment.