Virtual Information Security Risk Manager

Naukri Mitra; United States; Remote; USD 128,000 - 157,000; Full time

Benefits offered by this job

Remote work

Equity options

Annual bonus

Flexible schedule

Job summary

Naukri Mitra is seeking a Remote Information Security Risk Manager to lead end-to-end risk management. You will oversee risk strategies, governance, and reporting while guiding cross-functional teams to secure digital assets.

The role demands 7+ years in cybersecurity/risk management, strong certifications, and expertise in cloud risk and regulatory frameworks. Remote-first work with global collaboration and growth opportunities.

Qualifications

• Minimum 7 years of direct cybersecurity and risk management experience.
• Certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Implementer preferred.
• Knowledge of ISO 27001, NIST CSF, SOC 2 and GDPR.
• Experience with cloud risk (AWS/Azure/GCP) and vendor risk management.

Responsibilities

• Conduct risk assessments and threat analyses.
• Lead security governance, policy development and implementation.
• Align practices with ISO 27001, NIST CSF, GDPR and SOC 2.
• Oversee risk monitoring dashboards and reporting for executives.
• Collaborate with Legal, DevOps, IT and Product teams to embed risk controls.
• Develop incident response protocols and tabletop exercises.

Skills

Cybersecurity strategy

Risk management

Cloud risk

Threat modeling

Executive reporting

GRC tools

SIEM

Education

CISSP / CISM / CRISC / ISO27001 Lead Implementer

Tools

Archer

LogicGate

ServiceNow GRC

Splunk

Tenable

Qualys

CrowdStrike

Job description

Virtual Information Security Risk Manager Introduction

Shape the Future of Cybersecurity Are you driven by the mission to fortify digital landscapes? Do you possess the foresight to anticipate cyber threats and the expertise to mitigate them proactively? Suppose you're seeking remote jobs for Virtual Information Security Risk Manager, aiming to excel in work-from-home cybersecurity careers, or exploring leadership roles in risk management. In that case, this is your opportunity to lead transformative change in a dynamic, digitally evolving world. We’re hiring a seasoned Remote Information Security Risk Manager to oversee the organization’s end-to-end risk landscape. Your expertise will enable our teams to build, innovate, and expand confidently, knowing every digital touchpoint is safeguarded. You'll shape a cyber-resilient future by steering our global risk strategy with precision and vision.

Annual Salary: $142,467

Role Summary Key Responsibilities

• Conduct Risk Assessments & Threat Analyses
• Perform detailed assessments on infrastructure, software, vendors, and data environments
• Prioritize vulnerabilities based on potential impact, urgency, and regulatory risk
• Security Governance Leadership
• Develop, implement, and refine security policies, frameworks, and protocols
• Align practices with international standards, including ISO/IEC 27001, NIST CSF, SOC 2, and GDPR
• Drive Collaborative Security Solutions
• Liaise with Legal, DevOps, IT, and Product teams to ensure seamless protection strategies
• Convert technical risks into operational insights that guide executive decisions
• Establish Risk Monitoring and Reporting Structures
• Maintain real-time dashboards and incident logs for threat tracking
• Generate quarterly and annual reports highlighting key risk indicators and strategic recommendations
• Incident Response Preparedness
• Design and test incident response protocols, including detection, containment, and recovery plans
• Conduct tabletop exercises and post-mortem evaluations to optimize readiness

Required Qualifications & Skills

Experience & Credentials

• Minimum 7 years of direct experience in cybersecurity, risk management, or IT governance
• Industry certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Implementer are highly preferred

Subject Matter Expertise

• Firm grasp of enterprise-level cybersecurity strategies and emerging threat mitigation techniques
• Familiarity with cloud platforms (AWS, Azure, GCP) and associated risk profiles

Analytical Capabilities

• Skilled in assessing, quantifying, and communicating complex risk matrices
• Adept at translating technical vulnerabilities into business consequences

Communication Excellence

• Capable of producing clear documentation and executive-level reporting
• Able to present findings and risk analysis to stakeholders and decision-makers

Toolset Proficiency

• Experience with GRC tools (e.g., Archer, LogicGate, ServiceNow GRC)
• Familiarity with SIEM systems and threat detection platforms (Splunk, Tenable, Qualys, CrowdStrike)

Why This Role Stands Out

• Influence at Scale: Make a lasting contribution to a security-first strategy
• Provide leadership that supports secure infrastructure and data protection at every level
• Champion ethical risk reduction while empowering digital transformation

Growth and Leadership

• Step into a visible leadership track with mentorship and executive exposure
• Help shape a culture of secure innovation and responsible governance

Career Advancement & Learning

• Internal Growth Pathway to senior executive roles, including CISO or Global Risk Director
• Lead enterprise-wide risk programs and M&A risk strategies
• Access to conferences, certification programs, and expert-led sessions
• Monthly knowledge exchanges with global cybersecurity leaders
• Mentorship & Influence: Mentor emerging professionals in governance and compliance roles
• Lead groups focused on zero trust architecture and security evolution

Work Culture and Benefits

• Remote Work and Autonomy
• Flexible work-from-anywhere setup with performance-driven outcomes
• Collaborate with international colleagues using secure digital channels
• Total Rewards Package: Annual performance-based bonuses and equity options
• Wellness programs, mental health support, and peer knowledge circles
• Work-Life Synergy: Support for personal goals alongside professional growth
• Encouragement for mindful practices and lifelong learning

Your Impact on Our Mission

• Ensure data privacy and regulatory compliance in diverse jurisdictions
• Promote security-by-design across development workflows
• Foster resilience in the face of emerging risks and evolving legal frameworks

Real Voices from Our Team

"As soon as I stepped into this role, I realized I had joined a place where innovation meets integrity. I’ve led transformations in security posture, implemented cutting-edge policies, and had a front-row seat to shaping a risk-aware culture that spans continents." — Aarav Patel, Senior Cybersecurity Analyst

Expanding Globally

• USA
• Canada
• United Kingdom
• European Union
• Australia
• India
• and many more international regions