Senior Cybersecurity Risk Manager | GRC & Compliance Leader

JSG (Johnson Service Group, Inc.); Irvine (CA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k)

Job summary

JSG (Johnson Service Group, Inc.) is seeking a Senior Cybersecurity Risk Manager in Irvine, CA. The role focuses on strengthening and evolving our internal security risk strategy across governance, risk and compliance.

You will identify, assess, and mitigate cybersecurity risks, and build executive-ready metrics to influence risk decisions. The position is hybrid (Irvine, CA) with M-TH onsite and Friday work-from-home.

Qualifications

• Cybersecurity risk management expertise to evaluate risk posture across systems, applications, processes and leveraged solutions.
• Experience performing risk assessments, threat modeling, and impact analysis.
• Ability to build, enhance, and execute a cybersecurity risk management framework aligned to business objectives and regulatory needs.
• GRC processes and IT general controls knowledge including asset classification, vulnerability/threat analysis, audit controls & remediation, and risk reporting.
• Knowledge of ISO 27001/27002, ISO 31000:2018, ISO 27005:2022; NIST SP 800-12, 800-30, 800-37, 800-39, 800-53, 800-150, 800-161.
• Familiarity with regulations such as CCPA, GLBA, NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX.
• Ability to define and maintain security risk metrics (KRIs/KPIs) and report to executives.
• Strong communication to explain security concepts to business leaders and technical teams.
• Proficiency in Microsoft Office (Word, Excel, PowerPoint).
• Capable of working autonomously and collaboratively with attention to detail and sound judgment.

Responsibilities

• Identify, assess, and mitigate cybersecurity risks affecting operations and regulatory compliance.
• Develop and evolve risk management strategies and governance with executive-ready metrics.
• Partner cross-functionally to improve risk maturity and resilience.
• Maintain security risk metrics and deliver reporting for executives and stakeholders.
• Stay current with regulatory requirements and cybersecurity frameworks; influence control implementations.

Skills

Cybersecurity risk management

Risk assessments

Threat modeling

Risk framework

GRC processes

IT general controls

NIST methodologies

Regulatory awareness

Security metrics

Executive communication

MS Office

Autonomy

Education

Bachelor’s degree in finance, business, or related discipline

Tools

Microsoft Office

Job description

JSG (Johnson Service Group, Inc.) is seeking a Senior Cybersecurity Risk Manager in Irvine, CA. The role focuses on strengthening and evolving our internal security risk strategy across governance, risk and compliance.

You will identify, assess, and mitigate cybersecurity risks, and build executive-ready metrics to influence risk decisions. The position is hybrid (Irvine, CA) with M-TH onsite and Friday work-from-home.