Cybersecurity Risk Manager

Summary

As a 1LTR – Cybersecurity team member, you will apply your cybersecurity expertise, knowledge of regulatory requirements, and industry best practices to identify and guide maturity opportunities to support our Cybersecurity function. This is a key role in helping ensure our Cybersecurity team is informed of risks within their domain so that standard and control objectives are met within our risk appetite. The ideal candidate will be able to excel within an evolving technical cybersecurity and risk landscape, function independently, all while developing influential relationships to support their customers.

Duties & Responsibilities

• Support the identification and quantification/qualification of risks within cybersecurity operations, data loss prevention, and encryption for the Cybersecurity segment
• Manage the governance of issues through their lifecycle, from ideation to validation and subsequent closure
• Execute risk assessments against defined scopes and planned initiatives in alignment with our enterprise risk management frameworks
• Support and execute various processes such as Risk and Control Self-Assessment (RCSA), Exception Management, and assigned business governance groups
• Provide advisory and guidance on control design, cybersecurity standards/policies, metrics, and processes to help meet regulatory or maturity requirements
• Support executive reporting on the health and status of our risk, issues, and control portfolio
• Act as a trusted advisor to your customer, helping work through ambiguity and providing a risk perspective to new challenges or opportunities
• Deliver timely escalation of all issues requiring attention to senior management.

Basic Qualifications

• Bachelor’s degree in cybersecurity, risk management, or similar field
• Minimum of 5 years of experience in Audit, Compliance, Risk Management or Operational Risk.
• In lieu of a Bachelor’s degree 4 additional years of segment-specific or risk related experience may be considered

Preferred Qualifications

• 7+ years of combined technology experience in risk management, technology, cybersecurity, or related discipline within financial services industry
• 3+ years’ experience in cybersecurity with a focus on security operations, data loss prevention, and encryption
• 3+ years’ experience in risk management, preferably within the 1st line function
• 2+ years’ experience in one or more cloud platforms AWS, Azure, GCP
• 2+ years’ experience with threat modeling
• 2 + years’ experience with cybersecurity related policy, procedures, or standards governance
• 2 + years’ experience with quantitative/qualitative risk assessments
• 4+ years of experience working at a Category 3 or higher financial institution
• CISSP, GIAC, CISM, or other cybersecurity/risk management certifications
• Excellent communication skills required to negotiate internally, often at a senior level.