cybersecurity risk manager

Information Technology Senior Management Forum

<div><div><p>Posted Date</p>
<p>4/10/2026</p>
</div><div><p>Description</p>
<div>Risk Manager, Endpoint Security<p>
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, software quality, and data management.</p><p>
Technology &amp; Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 TDRM professionals are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.</p><p>
For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The 1st Line CISO has operational responsibilities and reports to the CIO. The 2nd Line Chief Tech Risk Officer (CTRO) and the TDRM organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO.</p><p>
Our business leaders must make technology decisions constantly. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.</p><p>
?The Risk Manager, Endpoint Security represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern.</p><p>
?This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of Capital One&rsquo;s Endpoint Security domain. This domain includes the deployment and enablement of cyber capabilities for user endpoints and servers across physical and virtual environments.</p><p>
Responsibilities:</p><ul><li>
Provide advisory, oversight, and effective challenge to the 1st Line of defense.</li><li>
Provide technical assessments of cybersecurity controls design and effectiveness.</li><li>
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li><li>
Stay current on emerging cyber threats and potential implications to the firm.</li><li>
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.</li><li>
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.</li><li>
Proven track record of leading, mentoring, and influencing others.</li><li>
Ability to communicate clearly in written and verbal form.</li><li>
Ability to manage multiple projects while maintaining superior results.</li><li>
Ability to work individually and cross-functionally.</li><li>
Execution oriented and a self-motivator.</li></ul><p>
Basic Qualifications:</p><ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality</li><li>
At least 3 years of experience implementing application whitelisting technologies</li><li>
At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients or thin platforms.</li><li>
At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints</li><li>
At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM)</li><li>
At least 2 years of experience with Privileged Access Management (PAM) tools</li><li>
At least 2 years of consulting, audit, or risk management experience</li></ul><p>
Preferred Qualifications:</p><ul><li>
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1</li><li>
Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC)</li><li>
Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)</li></ul><p>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</p><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical<br>
<p></p>
New York, NY: $215,200 - $245,600 for Manager, Cyber Technical<br>
<p></p>
Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical<br>
<p></p>
Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p>
Risk Manager, Endpoint Security<p>
Capital One is one of the fastest growing organizations in the world today, powered by our passion for our customers. We are serious about technology, we dream big, and we execute: Capital One moved our entire enterprise to the public cloud over the course of five years. Just as we prioritize driving innovation through technology, we equally prioritize cybersecurity, reliability, software quality, and data management.</p><p>
Technology &amp; Data Risk Management (TDRM) is a small organization that packs a big punch. The ~200 TDRM professionals are trusted experts who oversee ~14,000 developers at Capital One. We raise the bar for excellence in cybersecurity, reliability, and tech risk, and data management risk. We shape strategy and decisions, challenge activities to ensure they meet our standards, and perform independent tests of our security and technology risk.</p><p>
For years, the cybersecurity community has debated whether the CISO should report to the CIO or not. In regulated financial services, the answer is: both. The 1st Line CISO has operational responsibilities and reports to the CIO. The 2nd Line Chief Tech Risk Officer (CTRO) and the TDRM organization have broader responsibilities for cybersecurity but also reliability, software quality, resilience, and the risk of failing to manage our data. The CTRO is independent and oversees the work of the CISO, the CIO/CTO, and the Chief Data Officer. The CTRO reports to the Chief Risk Officer, who reports directly to the CEO.</p><p>
Our business leaders must make technology decisions constantly. TDRM makes sure they have the tech and data risk information they need to make good decisions. Associates within TDRM are highly-skilled information security, cybersecurity, site reliability engineering, technology, data analyst, data scientist, and risk management professionals. They have a wealth of experience and a demonstrated ability to add value with their advice and to deliver high-impact results.</p><p>
?The Risk Manager, Endpoint Security represents a unique opportunity for those with hands-on cybersecurity technical and operational experience who have a desire to leverage and enhance that expertise in a risk management organization. This individual will have the ability to use technical skills and cyber subject matter expertise to provide effective oversight, credible challenge, and expert advice to help manage and control risk associated with cyber operations. This position will play a key and influential role in assessing and challenging cybersecurity capabilities and operational effectiveness to drive action against areas of risk and concern.</p><p>
?This role will play a key role in the review, risk identification, risk assessment, reporting, and effective challenge of cybersecurity controls, operational capabilities, and associated processes. This individual will provide subject matter expertise and oversight and effective challenge of Capital One&rsquo;s Endpoint Security domain. This domain includes the deployment and enablement of cyber capabilities for user endpoints and servers across physical and virtual environments.</p><p>
Responsibilities:</p><ul><li>
Provide advisory, oversight, and effective challenge to the 1st Line of defense.</li><li>
Provide technical assessments of cybersecurity controls design and effectiveness.</li><li>
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors, as needed.</li><li>
Stay current on emerging cyber threats and potential implications to the firm.</li><li>
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives.</li><li>
Coordinate program-related activities and deliverables to ensure effective collaboration within the team and across stakeholder groups.</li><li>
Proven track record of leading, mentoring, and influencing others.</li><li>
Ability to communicate clearly in written and verbal form.</li><li>
Ability to manage multiple projects while maintaining superior results.</li><li>
Ability to work individually and cross-functionally.</li><li>
Execution oriented and a self-motivator.</li></ul><p>
Basic Qualifications:</p><ul><li>
Bachelor&rsquo;s degree or military experience</li><li>
At least 5 years of experience implementing endpoint detection and response (EDR) tools with anti-malware and anti-virus functionality</li><li>
At least 3 years of experience implementing application whitelisting technologies</li><li>
At least 3 years of experience implementing next-generation endpoint platforms such as virtual desktop infrastructure (VDI) or thin clients or thin platforms.</li><li>
At least 3 years of experience implementing tools and processes that remove sensitive data off endpoints</li><li>
At least 3 years of experience with Mobile Device Management (MDM) or Mobile Application Management (MAM)</li><li>
At least 2 years of experience with Privileged Access Management (PAM) tools</li><li>
At least 2 years of consulting, audit, or risk management experience</li></ul><p>
Preferred Qualifications:</p><ul><li>
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1</li><li>
Cybersecurity certifications such as: Certified Information Systems Security Professional (CISSP); Certified Information Security Manager (CISM); or Certified in Risk and Information Systems Control (CRISC)</li><li>
Cloud certifications for Amazon Web Services (AWS) or Google Cloud Platform (GCP)</li></ul><p>
At this time, Capital One will not sponsor a new applicant for employment authorization for this position.</p><p>
The minimum and maximum full-time annual salaries for this role are listed below, by location. Please note that this salary information is solely for candidates hired to perform work within one of these locations, and refers to the amount Capital One is willing to pay at the time of this posting. Salaries for part-time roles will be prorated based upon the agreed upon number of hours to be regularly worked.</p>
McLean, VA: $197,300 - $225,100 for Manager, Cyber Technical<br>
<p></p>
New York, NY: $215,200 - $245,600 for Manager, Cyber Technical<br>
<p></p>
Plano, TX: $179,400 - $204,700 for Manager, Cyber Technical<br>
<p></p>
Richmond, VA: $179,400 - $204,700 for Manager, Cyber Technical<p></p><p><br>
Candidates hired to work in other locations will be subject to the pay range associated with that location, and the actual annualized salary amount offered to any candidate at the time of hire will be reflected solely in the candidate&rsquo;s offer letter.</p>
This role is also eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). Incentives could be discretionary or non discretionary depending on the plan.<p>
Capital One offers a comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being. Learn more at the Capital One Careers website. Eligibility varies based on full or part-time status, exempt or non-exempt status, and management level.</p>
This role is expected to accept applications for a minimum of 5 business days.No agencies please. Capital One is an equal opportunity employer (EOE, including disability/vet) committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Capital One will consider for employment qualified applicants with a criminal history in a manner consistent with the requirements of applicable laws regarding criminal background inquiries, including, to the extent applicable, Article 23-A of the New York Correction Law; San Francisco, California Police Code Article 49, Sections 4901-4920; New York City&rsquo;s Fair Chance Act; Philadelphia&rsquo;s Fair Criminal Records Screening Act; and other applicable federal, state, and local laws and regulations regarding criminal background inquiries.<p>
If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation, please contact Capital One Recruiting at 1-800-304-9102 or via email at RecruitingAccommodation@capitalone.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p><p>
For technical support or questions about Capital One's recruiting process, please send an email to Careers@capitalone.com</p><p>
Capital One does not provide, endorse nor guarantee and is not liable for third-party products, services, educational tools or other information available through this site.</p><p>
Capital One Financial is made up of several different entities. Please note that any position posted in Canada is for Capital One Canada, any position posted in the United Kingdom is for Capital One Europe and any position posted in the Philippines is for Capital One Philippines Service Corp. (COPSSC).</p></div>
</div><div><p>Salary</p><p>
197,300.00 - 225,100.00 Annual</p>
</div><div></div><div><div><p>Type</p><div><p>
Full-time</p></div></div></div></div>

Risk Manager, Endpoint Security

Little Caesars Pizza

<div>
 <strong>
  Build a Bigger, Better, Bolder Future
  <br/>
  <br/>
 </strong>
 Imagine working for a company that measures its success based off the growth of its colleagues, a company that invests in its future by investing in you. Little Caesars is a company where our colleagues make an impact.
 <br/>
 <br/>
 <strong>
  Your Mission
  <br/>
  <br/>
 </strong>
 The Cybersecurity Governance, Risk, and Compliance Manager will drive and manage the enterprise-wide Governance, Risk, and Compliance capabilities regarding information management, risk management, policies &amp; standards, and internal/external compliance. The manager will lead a team that will design, develop, document, and communicate Governance, Risk, and Compliance related policies, standards, and procedures and is a key enabler in driving consistency across LCE. More specifically, the Governance, Risk, and Compliance Manager will be responsible for the design and development of robust operational capabilities in support of risk management (including third parties), compliance, and security training and awareness.
 <br/>
 <br/>
 In this role, the Manager will also offer guidance, consultations, and decision support for ad hoc requests and inquiries. The Manager will oversee the enterprise-wide Governance, Risk, and Compliance function to ensure key compliance metrics and reports are consistently generated, aggregated, and reported to senior management and other executive stakeholders.
 <br/>
 <br/>
 This position must be able to work on the development of a cybersecurity risk framework, implantation of policies, and security awareness program, as well as identifying and monitoring security compliance requirements. This position will interface with all levels of the organization and have access to security-sensitive information.
 <br/>
 <br/>
 <strong>
  How You&rsquo;ll Make An Impact
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Drive compliance leadership and engagement with the stakeholder operations teams to ensure the timely identification of cyber risk across markets as well as compliance with all appropriate regulatory requirements and internal cybersecurity policies and standards
  </li>
  <li>
   Develop and implement a cybersecurity risk assessment framework/methodology, standards, guidelines, and procedures with KPIs and coordinate the assessment across all business verticals
  </li>
  <li>
   Develop and oversee the adoption of a global cybersecurity policies and standards framework. In addition, ensure these global policies and standards (and any exceptions to them) are maintained current and relevant, and appropriately managed over their lifecycle
  </li>
  <li>
   Collaborate with Legal and Corporate Data Protection functions in the interpretation of regulatory requirements and compliance expectations, and ensure cybersecurity and regulatory requirements are properly addressed in third party contracts
  </li>
  <li>
   Lead the development of a high-value asset framework, information management controls to drive the proper application of security controls in a manner that is commensurate with the associated risks
  </li>
  <li>
   Lead the development of and oversee a global cybersecurity training, education, and awareness program
  </li>
  <li>
   Lead a strong team of professionals assigned to major initiatives ensuring dependable and responsive support to the organization
  </li>
  <li>
   Maintaining up-to-date, detailed knowledge of the IT security industry including awareness of new or improved security solutions and policies, processes, and procedures. Share and educate colleagues to mature the organization
  </li>
  <li>
   Develop and manage compliance metrics within the governance risk and compliance system, and report on the effectiveness of governance and compliance activities by collecting and aggregated key risk and compliance metrics
  </li>
  <li>
   Responsible for hiring, training, performance management, and corrective actions for direct reports. Collaborate with team members on career development and goal setting
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelors&rsquo; degree in Information Management, Information Security, Computer Engineering, Computer Science, or other closely related disciplines. Equivalent experience may be considered in lieu of a formal degree
  </li>
  <li>
   Minimum of seven (7) years of experience in cybersecurity related functions, risk management, audit, risk assurance, compliance, or similar area
  </li>
  <li>
   Minimum of four (4) years of progressive experience leading and managing a team building custom technical solutions and implementing third-party products is required
  </li>
  <li>
   Extensive cybersecurity governance, risk management, and compliance leadership experience in a large complex business organization
  </li>
  <li>
   Detailed working knowledge and prior experience in building and maintaining risk management framework, risk management processes, and associated reporting models
  </li>
  <li>
   Experience developing and implementing third-party risk management frameworks and processes
  </li>
  <li>
   Experience and familiarity with cloud data security and working with public cloud solutions
  </li>
  <li>
   Experience working with a Governance Risk and Compliance tool
  </li>
  <li>
   Experience identifying, evaluating, and managing risk in a complex and changing global environment
  </li>
  <li>
   Experience developing or leading impactful cybersecurity awareness materials and campaigns at a global level
  </li>
  <li>
   Prior experience developing security standards and policies and discerning and designing an organization&rsquo;s protection needs (i.e. security controls) for information systems and networks
  </li>
  <li>
   Experience with asset management
  </li>
  <li>
   Demonstrated ability to prioritize and execute tasks in a high-pressure environment
  </li>
  <li>
   Requires self-motivated approach to work with keen attention to detail
  </li>
  <li>
   A proactive goal achiever who innovates to go above and beyond expectations to get the job done and is comfortable working in a fast-paced, dynamic environment
  </li>
  <li>
   At least one of the following certifications is required or must be obtained within your first 12 months of employment: CISA, CISM, CRISC, or CISSP
  </li>
  <li>
   Deep understanding of cybersecurity and the relationship between threat, vulnerability, and information value in the context of governance, compliance, and risk management preferred.
  </li>
  <li>
   Knowledge of current industry methods for evaluating, implementing, and disseminating information technology (IT) security tools and procedures preferred.
  </li>
  <li>
   An understanding of emerging technology and digital trends and their impacts on cybersecurity preferred.
  </li>
  <li>
   High proficiency with common cybersecurity management frameworks, regulatory requirements, and industry leading practices
  </li>
  <li>
   Strong knowledge of third-party management leading practices and the potential cybersecurity risks involved in third-party relationships
  </li>
  <li>
   Strong knowledge of organizational training and education policies, processes, and procedures
  </li>
  <li>
   Deep understanding of risk-based decision-making (i.e. risk analysis, mitigation, resolution, acceptance, etc.)
  </li>
  <li>
   Experience with technical documentation related to PCI DSS, ISO 27001, NIST, SOC 2 and continuous monitoring
  </li>
  <li>
   Demonstrate strong verbal and written communication skills as well as strong analytical and problem-solving abilities
  </li>
  <li>
   Strong process design, time management and organizational skills
  </li>
  <li>
   Strong work ethic, leadership skills, initiative, and ownership of work
  </li>
  <li>
   Proven ability to build consensus and support across the organization
  </li>
  <li>
   Proven ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Where You&rsquo;ll Work
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   A state-of-the-art building with a modern-day, open environment in the heart of The District Detroit.
  </li>
  <li>
   A colleague fitness center, work caf&eacute; and an outdoor patio with grills.
  </li>
  <li>
   Over 60 different meeting spaces to help promote a collaborative environment.
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  <strong>
   All items listed above are illustrative and not comprehensive. They are not contractual in nature and are subject to change at the discretion of Little Caesars Enterprises Inc.
   <br/>
   <br/>
  </strong>
 </em>
 <em>
  Little Caesar Enterprises, Inc. is an Equal Employment Opportunity employer. All qualified applicants will receive consideration for employment without regards to that individual&rsquo;s race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender identity, age, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.
  <br/>
  <br/>
  The Company will strive to provide reasonable accommodations to permit qualified applicants who have a need for an accommodation to participate in the hiring process (e.g., accommodations for a job interview) if so requested.
  <br/>
  <br/>
  This company participates in E-Verify. Click on any of the links below to view or print the full poster.
 </em>
 <em>
  E-Verify and Right to Work.
  <br/>
  <br/>
 </em>
 <em>
  PRIVACY POLICY
 </em>
</div>


Cybersecurity Governance, Risk and Compliance Manager

Bechtel

<div><p><b>Requisition ID: 292696</b></p><ul><li><b>
Relocation Authorized: None</b></li><li><b>
Telework Type: Part-Time Telework</b></li><li><b>
Work Location: Reston, VA</b></li></ul><p></p><div><div><div><h2 class="jobSectionHeader"><b><br>
Extraordinary teams building inspiring projects:</b></h2></div><div><p>
Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seven continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.</p><p>
Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers' objectives to create a lasting positive impact. We serve the Infrastructure; Nuclear, Security &amp; Environmental; Energy; Mining &amp; Metals, and the Manufacturing and Technology markets. Our services span from initial planning and investment, through start-up and operations.</p><p>
Core to Bechtel is our Vision, Values and Commitments. They are what we believe, what customers can expect, and how we deliver. Learn more about our extraordinary teams building inspiring projects in our Impact Report.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Summary:</b></h2></div><div><p>
The Manager, Cybersecurity Risk Management focuses efforts on managing and reporting on cyber risks globally across Bechtel, playing a crucial role in assessing and managing risk, and driving mitigation plans associated with our wider cybersecurity program. The manager drives a comprehensive risk management program, while supporting peer cybersecurity teams in maturing and standardizing their programs. The manager identifies and mitigates security risks; provides subject matter expertise and technical guidance to process owners; partners with Service Owners, GBU Managers, IT Architecture, Operations and Support, and Software Development, to contribute to the reporting of a comprehensive view of the security risk posture and its impact on the business.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Major Responsibilities:</b></h2></div><div><p>
Risk Oversight</p><ul><li>
Develops and maintains a comprehensive cybersecurity risk management strategy, leads enterprise-wide cyber risk assessments and mitigation / remediation activities.</li><li>
Collaborates with IT, legal, compliance, and business units to ensure risk mitigation strategies are embedded in operations.</li><li>
Monitors emerging threats and risk posture and activities accordingly.</li><li>
Presents risk analysis, metrics, and mitigation plans to management and stakeholders.</li><li>
Identifies risk and mitigating controls for information security exceptions based on adherence to relevant company policies, standards, baselines, and industry standards (e.g., ISO 27001, NIST, GDPR, HIPAA, CIS, FedRAMP).</li><li>
Mentors and develops junior risk analysts and cybersecurity professionals.</li><li>
Assists with the administration and maintenance of the ServiceNow GRC platform.</li></ul><p>
Strategic Leadership, Business Partnership &amp; Enablement</p><ul><li>
Translates risk insights into strategic decisions and enterprise-wide policies.</li><li>
Contributes to the design of cybersecurity strategies by advising on risk reduction priorities related to exception and risk register trends.</li><li>
Develops metrics to track exception mitigation rates, approval / review rates, aging, and SLA compliance.</li><li>
Drives initiatives that reduce recurring exception requests through enterprise-wide solutions.</li></ul><p>
Analytics</p><ul><li>
Monitors the effectiveness of the information security exceptions process in accordance with agreed upon metrics and performance measures to drive continuous improvements.</li><li>
Conducts root cause analysis on recurring issues to enhance process efficiency and reduce exception requests.</li><li>
Collaborates with cross-functional teams to gather, interpret, and validate mitigating controls to ensure accuracy and relevance.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Education and Experience Requirements:</b></h2></div><div><ul><li>
Requires bachelor&rsquo;s degree plus 8+ years experience in information security risk, with at least 3 years in a risk management role or similar function.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Required Knowledge and Skills:</b></h2></div><div><ul><li>
Strong knowledge of cybersecurity frameworks, company policies, and regulatory requirements.</li><li>
Strong expertise across commercial and government cloud services (AWS, Azure, GCP, OCI, etc.), on-premises and application environments.</li><li>
Experience with tools such as ServiceNow, GRC tools, Power BI, and cloud technologies.</li><li>
Strong knowledge of risk frameworks (e.g., ISO 27005, NIST, ISO, PCI, SOX, etc.).</li><li>
Proven ability to translate complex technical concepts into plain language for decision-makers.</li><li>
Skilled in preparing polished deliverables that support informed decision-making.</li><li>
Team player who builds trust across technical and non-technical teams.</li><li>
Demonstrated ability to work independently, adapt quickly, and drive tasks forward with limited direction.</li><li>
Strong project management and delegation skills across diverse, cross-functional initiatives</li></ul><p></p><p><br>
Preferred:</p><ul><li>
Certifications such as CISSP, CISM, CRISC, or CISA.</li><li>
5+ years of prior experience in EPCM (Engineering, Procurement, Construction / Project Management). Prefer global company background and/or Fortune 500 and/or EPC industry.</li><li>
Comfortable working in a highly iterative environment, both structured and unstructured.</li><li>
Metrics and visualization tools knowledge a plus (i.e., ServiceNow, Power BI, Tableau,).</li><li>
Advanced user of M365 Suite to prepare all project plans, deliverables, presentations, reports, and findings.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Total Rewards/Benefits:</b></h2></div><div><p>
For decades, Bechtel has worked to inspire the next generation of employees and beyond! Because our teams face some of the world's toughest challenges, we offer robust benefits to ensure our people thrive. Whether it is advancing careers, delivering programs to enhance our culture, or providing time to recharge, Bechtel has the benefits to build a legacy of sustainable growth. Learn more at Bechtel Total Rewards</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Diverse teams build the extraordinary:</b></h2></div><div><p>
As a global company, Bechtel has long been home to a vibrant multitude of nationalities, cultures, ethnicities, and life experiences. This diversity has made us a more trusted partner, more effective problem solvers and innovators, and a more attractive destination for leading talent.</p><p>
We are committed to being a company where every colleague feels that they belong-where colleagues feel part of &quot;One Team,&quot; respected and rewarded for what they bring, supported in pursuing their goals, invested in our values and purpose, and treated equitably.</p></div></div></div><p></p><p><b><i><br>
Bechtel is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, disability, citizenship status (except as authorized by law), protected veteran status, genetic information, and any other characteristic protected by federal, state or local law. Applicants with a disability, who require a reasonable accommodation for any part of the application or hiring process, may e-mail their request to </i></b><b>acesstmt@bechtel.com</b></p></div>

Manager, Cybersecurity Risk Management

<div><p><b>Director, Cybersecurity Regulatory Engagement (1LOD)</b></p>
<p>
 At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of Director, Cybersecurity Governance, Risk and Controls Regulatory Engagement Lead to join our Cybersecurity team. This role can is in NYC, NY.</p>
<p><b>
Role Summary:</b></p>
<p>
The Director, Cybersecurity Regulatory Engagement (1LOD) is an individual contributor role within Cybersecurity Governance, Risk &amp; Controls (CGRC). Consistent with the First Line of Defense (1LOD) mandate, this role manages and executes cybersecurity regulatory engagement activities contributing to effective risk and control outcomes.</p>
<p>
The role supports and contributes to cybersecurity regulatory engagements, including exams, inquiries, remediation activities, new regulatory guidance and regulatory requests, by coordinating inputs, supporting control alignment, and driving disciplined execution. This position reports the Director of Cyber regulatory engagement and plays a critical role in translating regulatory expectations into clear, repeatable, and well-controlled 1LOD execution.</p>
<p>
This position requires deep regulatory judgment, and the ability to work directly with cybersecurity leadership, Engineering Controls, and risk partners in a highly regulated environment.</p>
<p><b>
Primary Responsibilities &ndash; 1LOD Alignment</b></p>
<p>
Regulatory Engagement Execution:</p>
<ul>
<li>Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).</li>
<li>Coordinate globally with cybersecurity process owners, control owners, and subject matter experts, to deliver accurate, consistent, and regulator‑ready responses &ndash; additionally, partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.</li>
<li>Reinforce a risk-aware culture through disciplined 1LOD execution.</li>
<li>Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.</li>
<li>Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.</li>
<li>Review, challenge, and approve key regulatory responses to ensure alignment with the firm&rsquo;s cybersecurity posture and risk appetite.</li>
<li>Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.</li>
<li>Prepare executive‑level briefings, materials, and talking points for senior management. Including preparing materials for senior management committees and boards.</li>
<li>Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements</li>
<li>Provide status updates and analysis to cybersecurity leadership.</li>
<li>Provide leadership, coaching, and oversight to supporting team members.</li>
<li>Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.</li>
<li>Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.</li>
<li>Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.</li>
<li>Support the design, implementation, and assessment of controls addressing regulatory expectations.</li>
<li>Contribute to 1LOD risk and control taxonomies.</li>
<li>Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.</li><br>
<li>
</li></ul><p>Regulatory Response Management</p>
<p>
Stakeholder Management &amp; Communication</p>
<p>
Team Leadership, Process Improvement &amp; Reporting</p>
<p>
Risk &amp; Control Alignment:</p>
<p><b>
Required Qualifications:</b></p>
<ul>
<li>12+ years of experience in cybersecurity, technology risk, governance, audit, controls or related technology disciplines.</li>
<li>Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.</li>
<li>Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.</li>
<li>Experience operating in a First Line of Defense (1LOD) role.</li>
<li>Demonstrated ability to operate effectively at senior leadership and executive levels.</li>
<li>Strong understanding of cybersecurity risk management, control frameworks, and regulatory expectations applicable to financial institutions.</li>
<li>Ability to synthesize complex technical and risk topics into clear, defensible regulatory narratives.</li>
<li>Exceptional written and verbal communication skills, with experience engaging regulators and senior executives.</li>
<li>Strong judgment, executive presence, and the ability to influence outcomes without direct authority.</li>
<li>Ability to manage multiple high‑stakes regulatory engagements concurrently under pressure.</li>
</ul>
<p>At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p> Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p><p><br>
<br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $116,000 and $246,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

Director, Cybersecurity Regulatory Engagement (1LOD)

CardWorks Servicing

<p>Join our team - and take the next step in achieving a fulfilling career!<br/></p><p>What We Do<br/></p><p>At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.<br/></p><p>Who We Are<br/></p><p>CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.<br/></p><p>CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.<br/></p><p>Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.<br/></p><p>Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.<br/></p><p>Position Summary:<br/></p><p>The Information Security Risk Management Director is responsible for leading the design, implementation, and oversight of the organization&rsquo;s information security risk management and vendor security assessment programs. This is a hands-on leadership role that develops and ensures that cyber risk identification, assessment, mitigation, and reporting activities are consistently executed and centrally managed within the organization&rsquo;s risk management framework and tools.<br/></p><p>The Director oversees and performs information security risk assessments across internal systems, business processes, third-party vendors, and enterprise projects to ensure risks are effectively identified, rated, and managed in alignment with Enterprise Risk Management practices and regulatory frameworks such as the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), and PCI DSS.<br/></p><p>By integrating security risk management practices with business and technology initiatives, the Director drives informed decision-making, strengthens the organization&rsquo;s security posture, enhances compliance with policies and standards, and promotes a culture of proactive security risk management across the enterprise.<br/></p><p>Essential Functions:<br/></p><p>Leadership and Program Oversight<br/></p><p>Lead, mature, and operationalize the organization&rsquo;s information security risk management and vendor security assessment programs.<br/>Provide strategic and hands-on leadership for a small team and/or third-party resources responsible for executing assessments, managing risk registers, and maintaining program processes.<br/>Develop and maintain consistent methodologies, templates, and workflows for risk assessments and vendor reviews.<br/>Partner with Enterprise Risk Management to ensure cybersecurity risks are integrated into enterprise risk registers, prioritized appropriately, and aligned with enterprise issue management and escalation processes.<br/>Risk Assessment and Governance<br/>Oversee and perform security risk assessments for applications, infrastructure, and business processes to identify threats, vulnerabilities, control weaknesses, and business impacts.<br/>Mature risk scoring methodologies to prioritize risks based on likelihood and business impact.<br/>Identify opportunities to streamline assessment workflows, automate evidence collection, and enhance tool integration across GRC, IT, and security systems.<br/></p><p>Vendor and Third-Party Security Risk<br/></p><p>Lead vendor security reviews, evaluating SOC 2 reports, ISO 27001 certifications, PCI AOCs, and penetration test results to assess vendor control maturity.<br/>Collaborate with Procurement, Legal, and Third-Party Risk Management (TPRM) teams to embed security requirements into contracts, onboarding, and ongoing vendor oversight.<br/>Track and manage vendor-related security issues, ensuring timely remediation, escalation, and closure consistent with SLAs and enterprise issue management processes.<br/>Develop and maintain vendor risk dashboards and KRIs to provide visibility into supply-chain risk exposure and remediation progress.<br/></p><p>Reporting and Continuous Improvement<br/></p><p>Define, track, and report cybersecurity risk metrics, dashboards, and assessment outcomes for senior leadership.<br/>Ensure data quality, consistency, evidence integrity, and traceability across GRC platforms and supporting tools<br/>Drive program improvements through automation, analytics, risk trend analysis, and lessons learned from incidents, audits, and assessments.<br/>Promote a culture of transparency, accountability, and proactive cyber risk management throughout the organization.<br/></p><p>Education and Experience<br/></p><p>8+ years of experience in information security, security risk management, compliance, or related fields within a regulated or technology-driven environment, including 3+ years in a leadership or program management capacity.<br/>Demonstrated experience in assessing, mitigating, and tracking security risks across systems, infrastructure, and third-party vendors, with proven success in driving remediation and program maturity.<br/>Strong understanding of information security risk frameworks and methodologies, including the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), CIS-CSC, and PCI DSS, with hands-on experience applying these standards to projects, systems, and infrastructure.<br/>Experience developing or enhancing risk management processes, including risk and control matrix development, risk scoring models, control evaluation criteria, and integrating governance workflows with enterprise risk management (ERM) practices.<br/></p><p>Proven ability to collaborate across diverse stakeholders, including IT, Enterprise Risk Management, Legal, Compliance, business units, and external partners, to embed security requirements, align with project objectives, and inform decision-making.<br/></p><p>Familiarity with GRC or security compliance platforms (e.g. Archer, ServiceNow, Auditboard) and reporting mechanisms for documenting and tracking risk, remediation, and control testing results.<br/>Bachelor&rsquo;s or master&rsquo;s degree in information security, Information Technology, Risk Management, or a related field preferred.<br/>Preferred certifications: CRISC, CISM, CISSP, or CISA.<br/></p><p>Summary of Qualifications:<br/></p><p>Strategic and hands-on cybersecurity risk leader with a proven ability to design, implement, and mature enterprise-wide risk management programs.<br/>Deep understanding of information security risk frameworks (NIST CSF, CRI Profile, PCI DSS, CIS Controls, etc.) and enterprise risk management principles, with practical experience applying them across systems, processes, and third-party vendors.<br/>Demonstrated success in leading and mentoring small teams, fostering capability growth, and scaling risk management functions to meet enterprise needs.<br/>Strong analytical and problem-solving skills, adept at evaluating threats, assessing process and control effectiveness, addressing gaps, and translating risks into business-relevant insights.<br/>Skilled at delivering on and coordinating multiple efforts across IT, business, compliance, and ERM teams, influencing decisions, and driving risk-informed outcomes while maintaining accountability and transparency.<br/>Excellent communication and interpersonal skills (via email, chat, in-person, and virtual) to engage effectively with technical teams, executives, and non-technical stakeholders.<br/>High level of attention to detail and organization, ensuring accurate, timely, and complete documentation and reporting.<br/></p><p>Recognized as a trusted advisor and credible authority, capable of balancing strategic oversight with hands-on execution in a dynamic and evolving environment.<br/></p><p>Self-motivated and collaborative, with a strong commitment to continuous improvement, accountability, operational excellence, and promoting a culture of proactive security risk management across the organization.<br/></p><p>Ideally, the qualified candidate will work at the following location(s): South Jordan, UT; Woodbury, NY; Horsham, PA; Pittsburgh, PA; Orlando, FL. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.<br/></p><p>The salary range for this position, if located in NY Metro/NY State is $151,165 to $167,961. However, please note that the salary range will vary for other geographic areas.<br/></p><p>#INDHP<br/></p><p>Our Employee Value Proposition<br/></p><p>Competitive Pay, including a Bonus Target or Variable Pay Incentive Program<br/>Benefits Package -Medical, Dental, and Vision (plus much more)<br/>401(k) Plan with Company Match<br/>Short- &amp; Long-Term Disability<br/>Wellness Programs<br/>Group Life and AD&amp;D Insurance<br/>Paid Vacation, Sick Days and bank Holidays<br/>Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition<br/></p><p>We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.<br/></p><p>We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.<br/></p>

Director, Cybersecurity Compliance

Stellar Hunters

<div><h4 class="jobSectionHeader"><b>Job Summary</b></h4><p>
We are seeking a <b>Cyber GRC Manager</b> to lead and mature the company&rsquo;s cyber governance, risk, and compliance (GRC) program. The successful candidate will partner with Security, IT, Legal, Risk, and business stakeholders to design, implement, and operate controls, policies, and risk management practices that reduce cyber risk and support business objectives. This role will own compliance initiatives, third-party risk assessments, policy lifecycle management, and metrics to drive continuous improvement across the organization.</p><h4 class="jobSectionHeader"><b>
Key Responsibilities</b></h4><h5 class="jobSectionHeader"><b>
GRC Strategy &amp; Program Leadership</b></h5><ul><li><p>
Develop and evolve a risk-based cyber GRC strategy that aligns with enterprise risk appetite and business priorities.</p></li><li><p>
Lead the GRC program, including governance forums, risk assessment cadence, control frameworks, and remediation tracking.</p></li><li><p>
Partner with senior leadership to translate regulatory and business requirements into practical program objectives and roadmaps.</p></li></ul><h5 class="jobSectionHeader"><b>
Policy, Standards &amp; Control Management</b></h5><ul><li><p>
Maintain and enhance information security policies, standards, and procedures; ensure clear ownership and version control across the policy lifecycle.</p></li><li><p>
Define and maintain control objectives mapped to frameworks (e.g., NIST CSF, ISO 27001, SOC 2) and ensure consistent implementation across teams.</p></li><li><p>
Coordinate control testing, assessments, and remediation activities with internal teams and external assessors.</p></li></ul><h5 class="jobSectionHeader"><b>
Risk Assessment &amp; Third-Party Risk Management</b></h5><ul><li><p>
Conduct enterprise and technology risk assessments; identify, evaluate, and prioritize cyber risks and mitigation plans.</p></li><li><p>
Own third-party risk management processes including vendor risk assessments, due diligence, contract security requirements, and ongoing monitoring.</p></li><li><p>
Work with procurement and vendor owners to remediate deficiencies and reduce supply chain risk.</p></li></ul><h5 class="jobSectionHeader"><b>
Compliance &amp; Audit Support</b></h5><ul><li><p>
Manage compliance programs and readiness for relevant regulations and standards (e.g., SOC 2, ISO 27001, GDPR, HIPAA where applicable).</p></li><li><p>
Act as primary liaison for internal and external audits, prepare evidence and reporting, and coordinate remediation activities.</p></li><li><p>
Maintain documentation and continuous evidence of controls to support attestations and regulatory reporting.</p></li></ul><h5 class="jobSectionHeader"><b>
Metrics, Reporting &amp; Continuous Improvement</b></h5><ul><li><p>
Define and report GRC metrics and dashboards (e.g., risk posture, control maturity, remediation timelines, vendor risk status) to leadership and stakeholders.</p></li><li><p>
Use data and trend analysis to identify program gaps, recommend improvements, and measure the effectiveness of risk reduction efforts.</p></li><li><p>
Develop and maintain GRC playbooks, runbooks, and process documentation to enable repeatable, auditable practices.</p></li></ul><h4 class="jobSectionHeader"><b>
Required Qualifications - Skills &amp; Experience</b></h4><ul><li><p>
Bachelor&rsquo;s degree in Information Security, Cybersecurity, IT, Risk Management, or a related field, or equivalent practical experience.</p></li><li><p>
5+ years of hands-on experience in cyber governance, risk, and compliance, information security, or related roles.</p></li><li><p>
Practical knowledge of common security frameworks and standards (e.g., NIST CSF, ISO 27001, SOC 2) and experience mapping controls to frameworks.</p></li><li><p>
Experience managing third-party/vendor risk assessments, contract security requirements, and remediation workflows.</p></li><li><p>
Strong communication and stakeholder management skills with the ability to influence technical and non-technical audiences.</p></li><li><p>
Analytical mindset with experience developing risk assessments, metrics, and executive-level reporting.</p></li><li><p>
Familiarity with GRC platforms, risk assessment tools, ticketing systems, and common productivity software.</p></li></ul><h4 class="jobSectionHeader"><b>
Preferred Qualifications</b></h4><ul><li><p>
Relevant certifications such as CISSP, CISM, CRISC, CISA, or CDPSE preferred.</p></li><li><p>
Experience supporting SOC 2, ISO 27001, or other third-party audits and working with external assessors.</p></li><li><p>
Background in cloud security, identity and access management, or secure software development lifecycle practices.</p></li><li><p>
Experience implementing or operating GRC tooling (e.g., Archer, RiskLens, OneTrust, ServiceNow GRC) is a plus.</p></li></ul><h4 class="jobSectionHeader"><b>
Work Environment &amp; Compensation</b></h4><ul><li><p>
Full-time position with a hybrid onsite/remote model; occasional travel and after-hours engagement may be required to support assessments and incident response activities.</p></li><li><p>
Competitive salary commensurate with experience and a comprehensive benefits package, including health insurance, retirement plan options, and paid time off.</p></li><li><p>
Opportunities for professional development, cross-functional collaboration, and career growth within Security, IT, and Risk functions.</p></li><li><p>
Inclusive, respectful culture that values diversity, equity, and work-life balance.</p></li></ul></div>

Cyber GRC Manager

Paramount Assure

<div><div>Business Development Manager &ndash; Consulting Services</div><div><b>
Location:</b> Dubai, UAE</div><div><b>
Experience Required:</b> 5+ Years</div><div><b>
Industry:</b> Cybersecurity / GRC / Technology Consulting</div><div></div><div><br>
We are looking for an experienced Business Development Manager to drive consulting services sales in the UAE market. The role focuses on developing new business opportunities and managing client relationships for cybersecurity and GRC consulting services. The ideal candidate should have a strong network in the UAE enterprise market and experience selling consulting or professional services related to cybersecurity, governance, risk, and compliance.</div><div></div><div><b><br>
Key Responsibilities</b></div><ul><li>
Identify and develop new business opportunities for cybersecurity and GRC consulting services.</li><li>
Build and manage a strong sales pipeline through networking, referrals, and market outreach.</li><li>
Engage with CIOs, CISOs, risk leaders, and senior stakeholders in enterprise organizations.</li><li>
Understand client security, compliance, and governance challenges and position consulting solutions.</li><li>
Work closely with technical consulting teams to design and propose suitable service offerings.</li><li>
Prepare proposals, presentations, and commercial discussions with prospective clients.</li><li>
Manage the complete sales cycle from lead generation to contract closure.</li><li>
Develop long-term relationships with clients and identify opportunities for additional consulting engagements.</li><li>
Monitor market trends, regulatory updates, and cybersecurity demand in the UAE region.</li><li>
Maintain accurate pipeline tracking and sales reporting in CRM systems.</li></ul><div><b>
Required Skills and Qualifications</b></div><ul><li>
Bachelor&rsquo;s degree in Business, IT, Cybersecurity, or related field.</li><li>
Minimum 5 years of experience in business development or consulting sales.</li><li>
Experience selling cybersecurity consulting, GRC consulting, or IT professional services.</li><li>
Strong understanding of cybersecurity frameworks, risk management, and compliance concepts.</li><li>
Proven experience in the UAE enterprise market with an existing network is preferred.</li><li>
Strong communication, negotiation, and client relationship management skills.</li><li>
Ability to work with technical teams and translate consulting solutions into business value.</li></ul><div><b>
Preferred Experience</b></div><ul><li>
Experience selling services related to ISO 27001, NIST, AI Governance, PCI DSS, or regulatory compliance.</li><li>
Exposure to cybersecurity assessments, governance programs, or risk advisory services.</li><li>
Experience working with consulting firms or cybersecurity service providers.</li></ul></div>

Business Development Manager

Search 10000+ Cybersecurity risk manager jobs near you this April. New roles added regularly across leading industries. Apply today.