Senior Risk Advisor

About Us

We are a well-established, global organization with a diverse portfolio of businesses spanning media, information services, technology, and digital products. Our teams support a broad range of recognized brands and business units, creating an environment that combines the resources and stability of a large enterprise with the variety and complexity of a multi-business organization. Technology plays a critical role in how our businesses operate, innovate, and serve their audiences and customers. Our Governance, Risk & Compliance organization partners closely with business and technology leaders to strengthen decision-making, manage emerging risks, and build scalable programs that support responsible growth.

Why Join Us?

• Enterprise-level impact: Advise leadership and influence risk decisions across a large and highly diverse organization.
• Meaningful ownership: Lead complex risk assessments and help shape how material risks are evaluated, escalated, and addressed.
• Program-building opportunity: Contribute directly to the continued growth and maturity of an enterprise third-party risk management program.
• Exposure to emerging risks: Work on evolving areas such as artificial intelligence governance, automation, data risk, and emerging technologies.
• High visibility: Partner with senior business, technology, procurement, security, and governance stakeholders.
• Varied and challenging work: Support multiple businesses, technologies, and operating models rather than working within a single narrow environment.
• Established organization with room to innovate: Join a stable, respected enterprise while helping modernize and scale its risk management capabilities.
• Collaborative environment: Work with experienced professionals who value thoughtful risk management, practical recommendations, and strong business partnership.

Responsibilities

• Advise senior leadership on enterprise risk posture, business tradeoffs, risk treatment options, and risk acceptance decisions. Provide clear, practical recommendations that balance security, operational, regulatory, and business priorities.
• Identify systemic, emerging, and cross-functional risks and influence related prioritization and investment decisions.
• Lead enterprise risk assessments and gap assessments across business processes, applications, technologies, and infrastructure. Manage assessments from initial scoping and stakeholder engagement through findings, treatment planning, and closure.
• Own the escalation of material risks and provide recommendations regarding remediation, mitigation, transfer, or formal acceptance.
• Maintain the enterprise risk register and ensure risks, owners, response plans, and target dates remain accurate and current. Track remediation activities, follow up with accountable stakeholders, and drive progress toward closure and SLA adherence.
• Incorporate risk data into recurring reporting, executive metrics, dashboards, and risk-focused governance forums.
• Support and help drive the third-party risk management program across vendor onboarding, reassessment, renewal, and offboarding. Conduct and contribute to vendor risk assessments across the third-party lifecycle.
• Advise business owners, procurement teams, technology leaders, and other stakeholders on third-party risk decisions. Support the escalation and remediation of material vendor risks.
• Identify opportunities to strengthen TPRM processes, improve consistency, and increase overall program maturity.
• Explore opportunities to improve risk management scalability through analytics, automation, and artificial intelligence.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Business Administration, or a related discipline. Equivalent professional experience may be considered in place of formal education.
• Seven or more years of experience in risk management, including meaningful risk advisory, leadership, or enterprise assessment responsibilities.
• Advanced understanding of enterprise risk management principles and experience advising leadership on risk posture, tradeoffs, treatment strategies, and acceptance decisions.
• Demonstrated experience conducting third-party or vendor risk assessments throughout the vendor lifecycle.
• Experience supporting, operating, or helping to advance a third-party risk management program.
• Strong executive communication skills, including the ability to translate complex risk information into clear recommendations for senior leaders and governance committees.
• Experience producing concise risk documentation, executive reporting, metrics, and formal assessment findings.
• Working knowledge of security, privacy, and risk frameworks such as NIST Cybersecurity Framework, NIST 800-53, PCI DSS, HIPAA, or SOC 2.
• Familiarity with GRC and vendor risk platforms such as TruOps, Prevalent, OneTrust, ProcessUnity, or ServiceNow.
• Strong stakeholder management skills and the ability to influence risk decisions across a federated or matrixed organization.
• Ability to manage competing priorities, navigate ambiguity, and drive accountability across multiple business and technology groups.

Preferred Qualifications

• CRISC, CISA, PMI-RMP, CTPRP, CTPRA, CISM, CISSP, or a related risk or security certification.
• Experience building, formalizing, or maturing a third-party risk management program.
• Experience working within a federated, matrixed, decentralized, or multi-business enterprise.
• Familiarity with artificial intelligence governance, responsible AI practices, or emerging technology risk.
• Experience supporting risk committees, governance councils, steering committees, or other executive-level forums.
• Experience applying analytics, automation, or AI to improve risk identification, assessment, monitoring, or reporting.

Pay

$70 - $90 per hour