Senior Information Security Risk Manager

Placements24; Windsor Park (TN); Ibrido; USD 61.000 - 91.000; Tempo pieno

Vantaggi offerti da questo lavoro

Remote-first work

Comprehensive health, life, and-dis

Descrizione del lavoro

Placements24 is recruiting a remote-first Senior Information Security Risk Manager for a leading financial services client. Based remotely, you will drive the risk program across the organization, shaping policy and governance while coordinating with global teams.

You will conduct risk assessments, manage risk registers, and ensure compliance with ISO 27001 and regulatory requirements. Strong leadership and communication are essential as you escalate issues to senior management.

Competenze

• Master's degree in Information Security, Risk Management, CS, or a related field.
• 7+ years of information security experience focusing on risk, governance, and compliance.
• Knowledge of risk assessment methodologies and regulatory requirements (POPIA, GDPR).

Mansioni

• Develop, implement, and manage the information security risk management program.
• Conduct regular risk assessments including vulnerability and threat analyses.
• Analyze and prioritize security risks and recommend mitigations.
• Ensure regulatory compliance and internal policies.
• Maintain risk registers, security policies, standards, and procedures.
• Collaborate with business units and IT to embed risk management into operations.
• Monitor and report risk controls and landscape to senior management.
• Lead security incident responses and contribute to remediation.
• Promote security awareness and best practices.

Conoscenze

Risk management

Governance & compliance

Regulatory knowledge

Stakeholder management

Communication & presentation

Formazione

Master's degree in Information Security or related field

Strumenti

ISO 27001

NIST CSF

Descrizione del lavoro

About the Role

Our client, a well-established financial services firm, is seeking a remote-first Senior Information Security Risk Manager to bolster their cybersecurity program. This role is instrumental in identifying, assessing, and mitigating information security risks across the organization. You will be responsible for developing and implementing a comprehensive risk management framework, ensuring compliance with regulatory requirements, and fostering a risk-aware culture. This is a critical leadership position within a globally distributed team, offering the chance to significantly influence the company's security posture. The position is based in EastLondon, EasternCape , but the role is entirely remote.

Key Responsibilities

• Develop, implement, and manage the information security risk management program.
• Conduct regular risk assessments, including vulnerability and threat assessments, to identify potential security weaknesses.
• Analyze and prioritize security risks, recommending appropriate mitigation strategies and controls.
• Ensure compliance with relevant industry regulations, data privacy laws, and internal policies.
• Development and maintain risk registers, security policies, standards, and procedures.
• Collaborate with business units and IT to integrate risk management principles into daily operations.
• Monitor and report on the effectiveness of security controls and the overall risk landscape to senior management.
• Lead the response to security incidents by assessing their impact and contributing to remediation efforts.
• Promote security awareness and best practices throughout the organization.

Requirements

• Master’s degree in Information Security, Risk Management, Computer Science, or a related field.
• 7+ years of experience in information security, with a strong focus on risk management, governance, and compliance.
• In-depth knowledge of risk assessment methodologies, security frameworks (e.g., ISO 27001, NIST CSF), and regulatory requirements (e.g., POPIA, GDPR).
• Experience in developing and implementing comprehensive risk management programs.
• Strong analytical and problem-solving skills, with the ability to translate complex risk information into actionable insights.
• Excellent communication, presentation, and stakeholder management skills.
• Relevant certifications such as CRISC, CISM, CISSP, or CRISC are highly desirable.
• Experience in the financial services industry is a significant advantage.

Benefits

• Attractive annual salary package up to ZAR .
• Comprehensive health, life, and disability insurance.
• Generous vacation policy and flexible remote working hours.
• Opportunities for advanced training, professional development, and certifications.
• A key role in shaping the security risk strategy of a major financial institution.
• Fully remote work arrangement with potential for international collaboration.