cybersecurity risk manager

SWATX

<div>Role Overview 
 The ideal candidate has deep experience in cybersecurity frameworks, risk management, regulatory
alignment, audits, policy development, and leading enterprise GRC programs.
The role includes working with government and regulated sectors, contributing to cybersecurity
posture improvement, and ensuring client compliance with international and KSA-specific
frameworks.
This position is client-facing, leadership-oriented, and requires both strategic and hands-on GRC
expertise. 
Top 5 Responsibilities
1.Lead GRC engagements including cybersecurity assessments, maturity evaluations, gap
analyses, and compliance improvement roadmaps.
2.Develop and implement cybersecurity governance frameworks, policies, procedures,
and standards aligned with ISO 27001, NCA ECC/CCC, NIST CSF, COBIT, and sector-
specific mandates.
3.Conduct enterprise risk assessments, create risk treatment plans, and drive continuous
risk reduction programs with business stakeholders.
4.Manage internal/external audits, regulatory compliance initiatives, and coordinate with
client teams to ensure audit readiness and control effectiveness.
5.Provide strategic advisory on cybersecurity governance, operating models, KPIs, and
continuous improvement across government and enterprise environments. 
Must-Have Technologies &amp; Platforms Experience
(Not technical hands-on configuration, but exposure in a GRC context)<ul><li>SIEM / SOC Technologies: Microsoft Sentinel, Splunk, IBM QRadar</li><li>Network &amp; Security Platforms: Palo Alto, Fortinet, Cisco Security</li><li>EDR/XDR Platforms: CrowdStrike, Microsoft Defender XDR</li><li>Cloud Security: Microsoft Azure security controls, AWS Security Hub, CSP governance</li><li>GRC Tools: RSA Archer, ServiceNow GRC, MetricStream, OneTrust</li><li>Vulnerability Management: Tenable, Qualys, Rapid7</li></ul>
Candidates must understand control requirements, governance, integration points, reporting
outputs, and compliance mapping for these technology domains. 
Nice-to-Have Technologies<ul><li>Knowledge of KSA-specific compliance platforms (NCA GRC portals, banking</li></ul>
compliance portals)<ul><li>Data Privacy and DLP Platforms (Microsoft Purview, Symantec, Forcepoint)</li><li>DevSecOps practices and CI/CD pipeline assessments</li><li>OT/ICS governance frameworks (NIST 800-82, IEC 62443)</li></ul> 
Required &amp; Preferred Certifications
Required<ul><li>ISO 27001 Lead Implementer (LI) or Lead Auditor (LA)</li><li>CGRC (formerly CAP) or equivalent risk-focused certification</li><li>CISM or CISSP (one required for Lead level)</li></ul>
Preferred / Strong Plus<ul><li>SABSA Foundation or Practitioner</li></ul><ul><li>COBIT 2019</li><li>ITIL 4 Foundation</li><li>NCA-specific training (ECC/CCC/CSM)</li><li>Cloud certifications: Azure Security Engineer, CCSK, CCSP</li></ul> 
Experience Requirements<ul><li>7&ndash;10 years in cybersecurity governance, compliance, and risk management roles</li><li>Proven leadership in GRC project delivery with enterprise or government clients</li><li>Experience with KSA regulatory frameworks, such as:
</li></ul>oNCA ECC v2 / CCC
oSAMA CSF
oCITC / CST Regulations
oNDMO Data Governance<ul><li>Experience designing cybersecurity programs and managing cross-domain teams</li></ul></div>

Cybersecurity GRC Expert

Abbott

<div><h2 class="jobSectionHeader">Key Responsibilities</h2><ul><li>
Manage Day-to-Day Operations: Oversee processing of cybersecurity Issues, Remediation Plans, and Policy Exceptions in ServiceNow IRM, ensuring timely closure and compliance.</li><li>
Team Leadership: Lead and mentor a small team in India, including two existing resources focused on exceptions.</li><li>
Global Collaboration: Partner with the U.S.-based team to deliver seamless global support and enable follow-the-sun coverage.</li><li>
Process Excellence: Drive continuous improvement in issue and exception workflows.</li><li>
Risk Mitigation: Collaborate with cross-functional teams to drive resolution of issues over risk acceptance, fostering a culture of proactive risk management and remediation.</li></ul><h2 class="jobSectionHeader">
Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in information security, Computer Science, or a related discipline, or equivalent combination of education and professional experience.</li><li>
3+ years in cybersecurity risk management or governance roles.</li><li>
1+ years of people management experience, preferably in a global or matrixed environment.</li><li>
Hands-on experience with ServiceNow IRM or similar GRC platforms.</li><li>
Strong understanding of cybersecurity frameworks and risk management principles.</li></ul><h2 class="jobSectionHeader">
Preferred Qualifications</h2><ul><li>
Experience managing policy exceptions and remediation plans in large enterprises.</li><li>
Familiarity with regulatory compliance standards (ISO 27001, NIST, GDPR).</li><li>
Certifications such as CISM, CISSP, or CRISC are a plus.</li></ul><h2 class="jobSectionHeader">
Why Join Us</h2><ul><li>
Opportunity to build and lead a critical function supporting global cybersecurity operations.</li><li>
Work in a collaborative environment with a focus on innovation and continuous improvement.</li><li>
Play a key role in reducing operational risk and enabling business resilience.</li></ul></div>

Manager, Cybersecurity Compliance

Scotiabank

<div>Requisition ID: 245907 
 
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture. 
Global Banking and Markets 
Global Banking and Markets (GBM) is a leading Canadian Capital Markets and Investment Banking business with a growing platform in the US and Latin America, operating globally for over 100 years. Scotiabank&rsquo;s strong U.S. presence provides our clients an important bridge to this key global market for trade and investment flows across the Americas and the world. 
Global Banking &amp; Markets provides a full range of investment banking, credit and risk management products and services relevant to the financing and strategic development needs of our clients. Our products include debt and equity financing, mergers &amp; acquisitions, corporate banking, institutional equity sales, trading and research, fixed income products, derivatives, energy, foreign exchange and precious &amp; metals. We also cross-sell the full range of wholesale products and services offered by the Scotiabank Group. 
Be part of an innovative, Global Capital Markets and Investment Banking business with a unique geographic footprint that puts capital to work for our clients across industries! We work together to drive ambition for every future! 
Purpose 
The Director, Cybersecurity Risk Management will lead the charge in strengthening Scotiabank&rsquo;s second line of defense (2LoD) Cybersecurity risk oversight of the first line implementation of cybersecurity programs, initiatives and delivery. 
This role requires a visionary leader with a deep understanding of cybersecurity principles, risk management, and compliance frameworks. The ideal candidate will possess strong communication and leadership skills, the ability to navigate complex regulatory landscapes, and a commitment to continuous improvement in the face of a rapidly evolving cybersecurity environment. 
What You'll Do<ul><li> 
Partner with global Risk team to develop and maintain a comprehensive Cybersecurity and Technology Risk Management Framework.</li><li>Serve as a subject matter expert and trusted risk oversight partner on cyber risks, regulatory reporting, and audit requirements, supporting requests and providing guidance across key cybersecurity domains, including Security Event Detection, Red Team, Cyber Incident Response, Cyber Threat Intelligence, Cyber Assurance, Exercise &amp; Simulations, Technology Resilience, Scenario Analysis, Third Party Cyber and Application Security.</li><li>Conduct effective challenge of high-risk items (e.g., new software, risk acceptances), ensuring actionable risk-based insights and solutions.</li><li>Partner with stakeholders in CISO, business, technology, and all three lines of defense to drive security compliance and awareness.</li><li>Lead risk oversight and challenge of first line risk management strategies and compliance activities, ensuring that the organization's cybersecurity posture is robust and resilient against top and emerging threats.</li><li>Provide insights and recommendations on cybersecurity trends, best practices, internal and external audit reports, and regulatory changes that may impact the organization.</li><li>Identify risk scenarios using the MITRE ATT&amp;CK Framework, calculate scoring, and present to executive leadership to drive risk-based action.</li><li>Collaborate with the Cyber Security Incident Response Team (CSIRT) to ensure timely monitoring, detection, and response to threats.</li><li>Ensure adherence to cyber risk management regulations, including FFIEC, OSFI, and other applicable laws.</li><li>Build and mentor a high-performing team, providing training and development opportunities to ensure team members stay current in the field.</li><li>Ensure alignment with the Bank&rsquo;s risk appetite and culture in all activities and decisions.</li><li>Create an environment in which the team pursues effective and efficient operations of their respective areas in accordance with Scotiabank&rsquo;s Values, its Code of Conduct, and the Global Sales Principles, while ensuring the adequacy, adherence to, and effectiveness of day-to-day business controls to meet obligations with respect to operational, compliance, AML/ATF/sanctions, and conduct risk.</li></ul> 
What You&rsquo;ll Bring<div><ul><li> 
University degree, preferably in Computer Engineering, Computer Science or related field, and a minimum of 10 years&rsquo; experience in increasingly senior Information Security roles in a complex, global organization.</li><li>Cybersecurity, technology, or risk management certifications such as CISSP, CCSP, CEH, CISM, etc.</li><li>Strong understanding and experience with regulatory and industry cybersecurity frameworks and guidance, including CRI Sector Profile, NIST, FFIEC, OSFI, and MITRE ATT&amp;CK.</li><li>Preferred certifications include CISA or equivalent, and familiarity with compliance frameworks (e.g., ISO or NIST).</li><li>10+ years of related IT process experience, including internal audit, external audit, or risk assessment.</li><li>Experience with financial sector regulatory practices and second line of defense effective challenge.</li><li>Excellent written and verbal communication skills, with the ability to communicate security objectives and concepts to technology and business teams to technical and non-technical stakeholders.</li><li>Strong leadership and collaboration skills. Excellent oral and written communication, ability to present confidently to senior executives, attention to detail and strong planning and management ability.</li><li>Solid understanding and operation of cybersecurity disciplines, including Cloud Security, AI/ML, Network Security, Threat Modeling, Vulnerability Management, and Technology Resiliency.</li><li>Advanced analytical reasoning skills, applying critical thinking and problem-solving techniques to break down business, technical, and operational objectives.</li><li>Proven ability to lead through change, manage dependencies, and control change in high-pressure, shifting environments.</li><li>Understanding of cybersecurity diligence methods, including vulnerability assessments and penetration testing.</li><li>Ability to interact and influence at all levels of management across functions.</li></ul></div> 
Interested? 
If your experience is closely related but doesn&rsquo;t align perfectly with every qualification, we do encourage you to apply - you might be the right candidate for this or other roles at Scotiabank! 
At Scotiabank, every employee is empowered to reach their fullest potential, respected for who they are and, embraced for their differences. That&rsquo;s why we work to grow and diversify talent and engage employees in a performance-oriented culture. 
What's in it for you? 
Scotiabank wants you to be able to bring your best self to work &ndash; and life, every day. With a focus on holistic well-being, our many flexible benefit programs are designed to help support your unique family, financial, physical, mental, and social health needs. 
#GBMAuditRisk 
Location(s): United States : Texas : Dallas 
 
Scotiabank is a leading bank in the Americas. Guided by our purpose: &quot;for every future&quot;, we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.
 
 
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.</div>

Director, Cybersecurity Risk Management

Sagar Fabrics

We are seeking a skilled Cybersecurity GRC Specialist to lead and strengthen our Governance, Risk, and Compliance initiatives. This role focuses on managing cybersecurity risks, ensuring regulatory compliance, supporting audits, and implementing security frameworks to protect organizational information assets.Key Responsibilities<ul><li>Lead and manage Governance, Risk, and Compliance (GRC) activities across the organization</li><li>Perform cybersecurity risk assessments and maintain enterprise risk registers</li><li>Develop, review, and update information security policies, standards, and procedures</li><li>Ensure compliance with frameworks and regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, and NIST</li><li>Coordinate and support internal and external security audits</li><li>Track, remediate, and report audit findings and risk treatment plans</li><li>Conduct third-party/vendor risk assessments and due diligence</li><li>Monitor compliance with regulatory, legal, and contractual security requirements</li><li>Collaborate with IT, Legal, and Business teams to implement security controls</li><li>Prepare risk reports, compliance dashboards, and management presentations</li><li>Stay updated with evolving cybersecurity threats, regulations, and best practices</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field</li><li>3+ years of experience in cybersecurity GRC, risk management, or compliance</li><li>Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, SOC 2, PCI-DSS, GDPR)</li><li>Experience in conducting risk assessments and audits</li><li>Strong documentation, policy writing, and reporting skills</li><li>Understanding of IT controls, data protection, and security governance</li><li>Excellent communication and stakeholder management skills</li></ul>Preferred / Good to Have<ul><li>Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP (preferred)</li><li>Hands-on experience with GRC tools (ServiceNow GRC, Archer, One Trust, etc.)</li><li>Experience in cloud security compliance (AWS, Azure, GCP)</li><li>Knowledge of data privacy laws and regulatory environments</li></ul>Job Types: Full-time, PermanentPay: ₹25,000.00 - ₹50,000.00 per monthBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

Cybersecurity GRC Analyst

ChargePoint

<div><div><h3 class="jobSectionHeader">About Us</h3>

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world's leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.</div>
Our fanatical focus on charging and 10+ years in business has made us an industry leader. Supported by $538 million from investors including American Electric Power, Canada Pension Plan Investment Board, Chevron Technology Ventures, Clearvision, Daimler Trucks &amp; Buses, GIC, Quantum Energy Partners, BMW i Ventures, Braemar Energy Ventures, Linse Capital, and Siemens, ChargePoint offers a once-in-a-lifetime chance to be part of creating an all-electric future and a trillion-dollar market. Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Discover what it's like to help build the fueling network of the future - check out our Engineering Blog.
<h3 class="jobSectionHeader">
Reports To</h3>

Senior Manager, Security Risk and Compliance
<h3 class="jobSectionHeader">
What You Will Be Doing</h3>

ChargePoint is looking for a Manager, Security Risk and Compliance who will maintain and enhance our security risk strategy and provide governance and risk management oversight; manage our security policy framework and relevant standards; oversee applicable security, privacy, contractual, and compliance requirements through controls definition, assessment, and process oversight.

This will be an amazing opportunity to build and refine the GRC program, bringing experience and best practices to take the program to the next level. The Manager will possess deep security risk and compliance knowledge and will be tasked with the most demanding projects and assessments.
<h3 class="jobSectionHeader">
What You Will Bring to ChargePoint</h3>
<ul><li>Introduce innovative, differentiating cybersecurity capabilities that enhance our overall competitive advantage and align risk strategies with business priorities</li>
<li>Program execution dealing with audits, compliance checks and external assessment processes for internal/external auditors, ISO 270001, PCI, SOC2, NIST 800-53, GDPR and third party vendors</li>
<li>An entrepreneurial spirit, you enjoy challenges across broad range of risk and compliance domains</li>
</ul><h3 class="jobSectionHeader">Requirements</h3>
<ul><li>7+ years of experience performing or leading GRC activities or programs to support compliance efforts</li>
<li>Prior experience with security policy, standards, and controls definition and enhancement across multiple compliance frameworks (PCI, SOC2, ISO, etc.). Plus for common control execution and building automations for continuous monitoring</li>
<li>Experience performing third-party cybersecurity assessments</li>
<li>Comprehensive knowledge of GRC platforms and reporting tools</li>
<li>Deep experience implementation security training and awareness initiatives to educate stakeholders regarding security risks</li>
<li>Knowledge of a cloud-services environment</li>
<li>Excellent written and verbal communication skills with the ability to influence a broad range of stakeholders (Legal, Engineering, Product, Finance, etc.)</li>
<li>Excellent organizational and people management skills</li>
<li>Experience in reporting policy and compliance posture to senior stakeholders</li>
<li>Familiarity with Privacy requirements such as GDPR/CCPA will be a huge plus</li>
</ul><h3 class="jobSectionHeader">Location</h3>

Bangalore, India<div> 
We are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

If there is a match between your experiences/skills and the Company needs, we will contact you directly.

ChargePoint is an equal opportunity employer. 
Applicants only - Recruiting agencies do not contact.</div></div>

Security, Risk, and Compliance Manager

COCC

Who we are...
 As an industry-leading fintech provider, COCC delivers innovative, comprehensive technology solutions and strategic partnerships throughout the Northeastern United States. Listed among American Banker's FinTech 100 and the Inc. 5,000 fastest growing companies in the nation, COCC inspires the industry with innovation and top-quality support. Designated a Top Workplace in Connecticut and a nationally Certified Great Place to Work, COCC recognizes employees as the core of our success.
 Inspiring you to become extraordinary in work and life.
 
What we need…
 We’re looking for a Technical Risk Manager to help drive our technology risk program with a strong focus on leading and maturing our enterprise vulnerability management capability. In this role, you’ll identify, assess, monitor, and mitigate technology and cybersecurity risks, ensuring our environments operate within the organization’s risk appetite. You’ll work hands on with modern infrastructure, cloud platforms, and security technologies that power our financial services ecosystem. You’ll lead a highly collaborative security team that values expertise, innovation, and practical problem solving. This is a unique opportunity to shape a core security function, influence technology teams across the business, and make a meaningful impact on our overall security posture. This position reports directly to the Vice President of Security.
 
What’s in it for you…
 COCC offers a collaborative environment, career growth, and all the benefits you’d expect from an award-winning employer, including:
 <ul>
<li>Hybrid schedules and generous paid time off to support flexibility and work/life balance</li>
<li>Customized training and onboarding to set you up for success in your first year</li>
<li>Robust employee development and formal career pathing programs</li>
<li>Cutting edge training and educational resources from providers like SANS, PluralSight, and CBT Nuggets</li>
<li>Competitive compensation, comprehensive benefits, and generous PTO offerings</li>
<li>On site fitness centers, wellness incentives, and lifestyle spending accounts</li>
<li>Tuition reimbursement for continued education</li>
<li>One on one career coaching and mentorship opportunities</li>
<li>DEIB initiatives that champion inclusion and encourage you to bring your authentic self to work</li>
<li>Financial planning assistance from certified professionals</li>
<li>Peer recognition programs celebrating contributions and achievements</li>
</ul>
What you’ll do…
 <ul>
<li>Lead a team of Risk Engineers responsible for identifying, assessing, monitoring, and mitigating technology and cybersecurity risks.</li>
<li>Lead and manage the enterprise Vulnerability Management Program, including strategy, tooling, operational processes, dashboards, and continuous improvement.</li>
<li>Own the full lifecycle of vulnerability intake, prioritization, assignment, remediation tracking, and risk based exception handling.</li>
<li>Partner closely with infrastructure, cloud, DevOps, and engineering teams to ensure timely and effective remediation of unacceptable risk.</li>
<li>Oversee scanning technologies (e.g., Qualys, Rapid7, Tenable, cloud native scanners) and maintain consistent coverage across servers, endpoints, networks, containers, and cloud workloads.</li>
<li>Provide technical risk advisory for new technologies, major system changes, and architectural decisions, with an emphasis on practical controls and risk reduction.</li>
<li>Assess technical controls—including IAM, network security, endpoint protection, cloud security, and encryption—to identify weaknesses or gaps.</li>
<li>Translate complex technical risks into clear, business focused explanations for leadership, committees, and technology stakeholders.</li>
<li>Participate in incident response and post incident reviews, contributing to root cause analysis and long term mitigation strategies.</li>
<li>Maintain strong alignment with GRC, Security Engineering, TPRM, and other cross functional teams to ensure cohesive enterprise risk management.</li>
<li>Monitor emerging threats and vulnerabilities relevant to financial institutions and recommend proactive defense measures.</li>
<li>Support risk acceptance processes through risk impact analyses and technical evaluation of compensating controls.</li>
<li>Perform internal reviews of infrastructure operations, coordinate external assessments, and ensure alignment with relevant frameworks and industry best practices.</li>
</ul>
What you’ll bring…
 <ul>
<li>Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field (or equivalent experience).</li>
<li>5–10+ years of experience in Information Security, Technology Risk, or Security Engineering within a complex environment, preferably in financial services.</li>
<li>2–5+ years of management experience leading security teams.</li>
<li>Deep hands on expertise with vulnerability management tools and methodologies (e.g., Qualys, Tenable, Rapid7, cloud native scanning, SBOM analysis).</li>
<li>Strong understanding of modern infrastructure and platforms including Windows/Linux servers, networking, cloud environments (AWS, Azure, or GCP), and containerized workloads.</li>
<li>Practical knowledge of security fundamentals such as IAM, network segmentation, endpoint security, encryption, patching processes, and secure configuration.</li>
<li>Familiarity with risk assessment and control validation practices related to technical risk domains.</li>
<li>Experience with regulatory and industry frameworks such as NIST CSF, NIST 800 53, CIS Controls, MITRE ATT&CK, or FFIEC cybersecurity guidance.</li>
<li>Ability to assess complex technical issues, determine risk impact, and communicate effectively with both technical and executive audiences.</li>
<li>Preferred (but not required) certifications: CISSP, CISM, CRISC, GSEC, GCCC, GSLC, Security+, and cloud security certifications (AWS/Azure/GCP).</li>
<li>Strong collaboration, communication, and leadership skills with the ability to influence stakeholders across the organization.</li>
<li>Familiarity with CI/CD security controls and container compliance.</li>
<li>Scripting or automation capabilities in Python, Perl, or PowerShell; experience with Ansible, Terraform, or n8n is a plus.</li>
</ul>
Salary range for this role is $125,000-150,000 annually
 
Applicants for employment in the US must have work authorization that does not currently or in the future require sponsorship of a visa for employment authorization in the United States.
 COCC is committed to maintaining a drug-free workplace. All applicants are required to pass a credit, background, and substance test prior to employment. COCC procures background and consumer reports in compliance with all Federal and State regulations, including The Fair Credit Reporting Act and applicable Department of Labor laws regarding pre-employment screens. COCC is an equal opportunity employer committed to a community of inclusion, and an environment free from discrimination, harassment, and retaliation.
 Accessibility - If you’re a job seeker with a disability and require accessibility assistance or an accommodation to apply for one of our jobs, please let us know by calling 860-678-0444 or emailing TalentManagement@cocc.com. Please specify the help you need and we’ll be happy to get back to you.

Technical Risk Management - Corporate Risk Manager - Req# 536

METARPO

<div>Position Overview:
<ul><li>Role Overview: Responsible for end-to-end technology risk lifecycle management within a specific security domain (Network &amp; Security Architecture). Reports to the area's Associate Director and acts as the primary risk advisor for assigned domain leaders.</li><li>
Key Responsibilities:<ul><li>
Identify, assess, and monitor technology risks and controls within the assigned domain.</li><li>
Lead and drive risk assessments, issues management, and remediation prioritization.</li><li>
Collaborate with technical SMEs and business units to analyze risk data, diagnose root causes, and propose solutions.</li><li>
Oversee controls testing (in partnership with offshore teams) and ensure effective risk reporting and escalation.</li><li>
Serve as the main point of contact for domain leaders, building strong relationships and acting as an advisor.</li><li>
Support integration and improvement of risk management processes, including advisory input on operating model changes.</li><li>
Use ServiceNow and Excel for risk data analysis and workflow management.</li></ul></li><li>
Required Skills &amp; Experience:<ul><li>
Strong background in technology risk management, preferably in financial services or large enterprise environments.</li><li>
Experience with risk and control identification, issues management, and remediation processes.</li><li>
Proven experience Network &amp; Security Architecture including identifying, assessing, prioritizing, and remediating vulnerabilities in complex environments</li><li>
Strong understanding of AI-specific threats (e.g., adversarial attacks, model theft, data poisoning) and practical experience in mitigating these risks within enterprise environments.</li><li>
Strong experience in Information security risk and cybersecurity control capabilities with extensive knowledge of information and technology risk management policies, methods, standards, tools, and processes (e.g., ISO, COSO, COBIT, NIST) as well as knowledge of compliance, legal, internal/external audit, and regulatory requirements.</li><li>
Ability to analyze technical data, ask critical questions, and synthesize findings for senior stakeholders.</li><li>
Familiarity with security domains such as vulnerability management, application security, network security, IAM, or cloud/infrastructure security.</li><li>
Excellent communication, stakeholder management, and influencing skills; able to drive alignment across diverse teams.</li><li>
Proficiency in ServiceNow, Excel, and general risk management tools.</li></ul></li><li>
Preferred Qualifications:<ul><li>
Experience with controls testing, audit, or GRC platforms.</li><li>
Understanding of regulatory and compliance frameworks relevant to technology risk.</li><li>
Prior consulting experience or demonstrated ability to operate in a matrixed, cross-functional environment.</li></ul></li></ul></div>

Cyber Security Risk Management Lead – Network & Security Architecture

Search 10000+ Cybersecurity risk manager jobs near you this March. New roles added regularly across leading industries. Apply today.