Sr Specialist, Cyber Security Risk

Apex Systems; Miami (FL); In loco; USD 110.000 - 150.000; Tempo pieno

Descrizione del lavoro

Apex Systems, LLC is seeking a Sr Specialist, Cyber Security Risk in Miami to lead risk assessment activities and manage risk documentation across information, OT, infrastructure, and applications. You will identify inherent and residual risks, propose mitigations, and escalate where needed.

The role partners with governance, compliance, IT and business units, maintains risk registers, and helps integrate enterprise risk management.

Competenze

• Experience in governance, risk & compliance (GRC) environments.

Mansioni

• Handle documentation such as risk letters and acceptance documentation.
• Identify, evaluate, and monitor inherent and residual risks, recommend mitigations.
• Conduct and facilitate cybersecurity risk assessments for information and maritime OT, infrastructure, applications, systems, and business initiatives.
• Maintain cybersecurity risk registers with escalation.
• Support enterprise risk management integration and reporting, including KRIs/KPIs.
• Develop and update Cybersecurity Risk Management Framework, playbooks, procedures, guidelines.
• Collaborate with governance, compliance, IT and business stakeholders.
• Communicate risk in business terms to technical and non-technical audiences, including senior leadership.

Conoscenze

GRC experience

Risk management

Communication with senior leadership

Cybersecurity risk assessments

Strumenti

LogicGate

Archer

ServiceNow IRM

Descrizione del lavoro

## Job Description# Sr Specialist, Cyber Security Risk* \\* Handle documentation such as risk letters and acceptance documentation.* Identify, evaluate, and monitor inherent and residual risks, recommend mitigation strategies, and support risk escalation and acceptance processes.* Conduct and facilitate cybersecurity risk assessments for information and maritime operational technologies, infrastructure, applications, systems, and business initiatives.* Maintain cybersecurity risk registers, ensuring risks are appropriately identified, documented, updated, tracked, and escalated.* Support enterprise risk management integration and cybersecurity risk reporting activities, including monitoring KRIs and KPIs.* Develop, maintain, and revise the Cybersecurity Risk Management Framework, playbooks, procedures, and guidelines.* Collaborate with Cybersecurity Governance, Compliance, IT, and other business stakeholders on cybersecurity requirements.* Communicate risk in clear business terms to both technical and non-technical stakeholders, including senior leadership.* Demonstrated experience with Governance, Risk, and Compliance (GRC).* Familiarity with privacy regulations and standards such as PCI and SOX.* Strong communication skills for interacting with senior-level stakeholders.* Working knowledge of risk management principles, methodologies, and security control frameworks.* Experience conducting risk identification, assessment, monitoring, and reporting.* Ability to develop guidance documentation and senior management reports.* Professional certifications such as CRISC, CISSP, CISA, Security+, or CGRC.* Experience in the cruise line industry.* Familiarity with GRC platforms such as LogicGate, Archer, or ServiceNow IRM.* Knowledge of third-party risk management and supplier cybersecurity assessments.