Cybersecurity Risk and Oversight Manager

Key Responsibilities

• Act as a cybersecurity oversight and second-line assurance function, identifying control gaps before audits occur
• Partner closely with Internal Audit to support cybersecurity-focused audits and pre-audit readiness
• Work directly with global operating companies to:
• Assess cybersecurity posture
• Identify risks related to identity, access, infrastructure, and operational technology (OT)
• Recommend improvements to raise cybersecurity maturity over time
• Perform and evaluate cybersecurity testing activities, including:
• Penetration testing approaches and tooling
• Active Directory security assessments
• Red teaming and adversarial testing methodologies
• Assess cybersecurity risks across IT and OT environments
• Evaluate real-world cyber issues seen across operations and recommend remediation strategies
• Serve as a trusted advisor to operating companies while maintaining independence required for oversight
• Collaborate continuously with cross-functional stakeholders in a blurred second/third-line model

Required Background & Skills

• Prior cybersecurity audit, cyber risk, or cybersecurity assurance experience
• Strong technical cybersecurity background, including:
• Identity and access management
• Network and infrastructure security
• OT security exposure
• Cybersecurity testing methodologies
• Hands-on experience with cybersecurity tools and assessments
• Ability to translate technical cybersecurity risks into audit-ready findings
• Comfortable working independently across a highly decentralized, global organization
• Strong relationship-building and communication skills

Preferred Experience

• Experience in internal audit, cybersecurity audit, or cyber risk roles
• Combination of audit mentality and technical cybersecurity expertise
• Experience in industry, consulting, or Big Four (not required, depth matters more than pedigree)