This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
This position represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern. The Senior Risk Manager, Data Protection will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of the key cybersecurity domain of data protection in specific areas such as data labeling, classification, tokenization, and encryption.
Job Responsibility:
Play a lead role in identifying areas of cyber risk to provide oversight, analysis, effective challenge, and risk-informed recommendations for enhancement
Provide technical assessments of cybersecurity and controls design and effectiveness
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed
Stay current on emerging cyber threats and potential implications to the firm
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups
Requirements:
Bachelor’s degree or military experience
At least 5 years of experience in cybersecurity or enterprise data management
At least 3 years of hands-on experience with data protection, technology such as encryption, tokenization, labeling or cryptography
At least 2 years of audit, risk management, program management or technology leadership experience
Nice to have:
2+ years of consulting experience
2+ years of experience driving enterprise remediation efforts
Experience as a team leader or technical lead
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1
Professional cyber certifications (Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC))
Professional Amazon Web Services (AWS) certifications (Solutions Architect, Security Specialty)
What we offer:
Performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)
comprehensive, competitive, and inclusive set of health, financial and other benefits