Strategic Cyber Risk Director — Enterprise Security

Tradeweb; New York (NY); On-site; USD 150,000 - 210,000; Full time

Job summary

Tradeweb Markets LLC is seeking a Cyber Risk Manager to lead governance and risk initiatives within the Information Security team. You will drive the risk program, work across technology, business, and vendors, and help mature the enterprise risk framework.

The role requires 10+ years of relevant experience and deep knowledge of NIST, CIS, ISO, and regulatory compliance including GDPR. You will mentor junior staff and communicate complex risks to non-technical stakeholders in a fast-paced

Qualifications

• Clearly articulate cyber risks to stakeholders
• Lead cyber risk–related program activities
• Manage governance within ERMF and policy framework

Responsibilities

• Provide leadership and oversight of Cyber Security risk management, and maintain governance within the company's Enterprise Risk Management Framework
• Manage cyber risk‑related program activities, and ensure effective collaboration within the team, as well as technology, business, and other shareholder groups
• Maintain the cyber‑risk register, control catalogue and its framework mappings, and ensures the controls and policy documentation aligns whilst clearly and concisely articulating cyber‑risks to key stakeholders (technical and non‑technical)
• Maintain and embed an Information Security Policy and management framework across the company that addresses the needs of the company, its staff, and other key stakeholders in line with relevant legislation and industry standards
• Owns the end-to-end process for cyber security related policy & standards creation, management, review and ensures they incorporate regulatory and other requirements
• Own the 3 rd party Cyber Risk Assessments for vendor engagements to ensure that information and Cyber Security risks through third party suppliers are identified and managed appropriately
• Support various internal and external cyber security audit and regulatory exams
• Manage related metrics, KPIs and performance indicators and provide regular updates to the senior management, and the needs of audit, regulator, and risk management purposes
• The role holder helps mentoring junior team members.
• 10 or more years of relevant experience
• Strong knowledge of technology and cyber risks and experience in working and collaborating with cross functional teams leading risk management programs
• Knowledge of common frameworks and standards such as NIST, CIS, ISO
• Knowledge and experience of key legal and regulatory compliance, e.g. GDPR,

Skills

Cyber risk management

Security governance

Cross-functional collaboration

Regulatory knowledge

Job description

Tradeweb Markets LLC is seeking a Cyber Risk Manager to lead governance and risk initiatives within the Information Security team. You will drive the risk program, work across technology, business, and vendors, and help mature the enterprise risk framework.

The role requires 10+ years of relevant experience and deep knowledge of NIST, CIS, ISO, and regulatory compliance including GDPR. You will mentor junior staff and communicate complex risks to non-technical stakeholders in a fast-paced