Cyber Governance, Risk, & Compliance Manager

Essential Duties and Responsibilities

• Define and operationalize the enterprise cybersecurity governance model, including decision forums, escalation paths, roles and responsibilities, and accountability for cyber risk ownership across technology and business leaders.
• Own and evolve the enterprise cybersecurity risk management framework, including risk taxonomy, assessment methodologies, third party cyber risk, risk acceptance criteria, and alignment to enterprise governance structures.
• Establish and maintain a cybersecurity program that provides visibility into risk trends, control effectiveness, and key governance indicators measure effectiveness of the cybersecurity program
• Compliance, Assurance & Audit
  • Lead regulatory, internal audit, and assurance activities
  • Ensure controls are effective, measurable, and aligned to standards (e.g., NIST, PCI)
• Partner with technology teams to drive remediation

Qualifications

• This position requires a minimum of three years as a Supervisor or Asst Manager in a related role.
• A minimum of eight years professional experience with Cybersecurity and/or Cyber Risk required.
• Solid understanding of Cyber Risk Management and Strategy frameworks as well as understanding of common enterprise threat scenarios.
• Deep understanding of security controls and alignment to key regulations (examples: NIST, PCI).
• Proven ability to cultivate, mentor/manage and motivate a diverse high-performing team of security professionals and set clear priorities to achieve department goals.
• Exceptional critical thinking skills and thought leadership with the ability to quickly comprehend complex problems, draw logical conclusions, make sound decisions, develop solutions, and negotiate and respond accordingly to drive closure.
• Strong analytical skills with excellent problem-solving ability.
• Articulate communicator and collaborator with the professional confidence and credibility to effectively engage and interact with senior and executive management.
• Ability to take unpopular positions when necessary, influence others to support these decisions, and maintain trust and credibility.
• Proficient in Microsoft Office, including Word, Excel and PowerPoint is needed.
• Excellent analytical, planning and negotiation skills are needed.
• Excellent interpersonal skills with the expert ability to develop strong relationships with key members of both internal and vendor teams.
• Demonstrated business acumen with an expert knowledge and understanding of business issues, priorities, goals, and strategy is necessary.
• Maintaining confidentiality, treating others with respect and upholding Company values is a key attribute.