security risk manager

emaratech

<div>
 Role Overview
 <br/>
 <br/>
 The Information Security Risk and Compliance (Governance, Risk, and Compliance) Manager implements and maintains frameworks to manage security risks, ensure regulatory compliance, and enforce security policies. He / She is responsible to:
 <br/>
 <br/>
 <ul>
  <li>
   oversee audits, manage third-party risks, and report to senior management on the security posture
  </li>
  <li>
   ensuring the effective implementation and continuous improvement of the Information Security Management System (ISMS), PCI DSS compliance, and UAE Central Bank (CBUAE) regulatory requirements
   <br/>
   <br/>
  </li>
 </ul>
 The role is responsible for strengthening security governance, managing enterprise security risks, maintaining regulatory compliance, and supporting executive oversight of cybersecurity programs across all group entities.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <strong>
  Governance, Policy &amp; ISMS
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Responsible for overseeing the execution of the GRC program in collaboration with the executive team as well as maintaining the group's library of security controls
  </li>
  <li>
   Lead the implementation, maintenance, and continuous improvement of the Group ISMS aligned with ISO/IEC 27001 standards
  </li>
  <li>
   Develop, update, implement, and maintain information security policies, standards, and procedures
  </li>
  <li>
   Ensure consistent implementation of information security governance across the group
  </li>
  <li>
   Develop goals for data privacy based on legal regulations and other compliance needs, designs and implement privacy policies and practices, and assess these practices for effectiveness
  </li>
  <li>
   Update security controls and provide support to all stakeholders on security controls covering internal assessments, laws, and regulations
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  PCI DSS Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Manage the organization's PCI DSS compliance program, including scope definition, risk assessments, and coordination with Qualified Security Assessors (QSAs)
  </li>
  <li>
   Track remediation activities and ensure continuous compliance with PCI DSS requirements
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  CBUAE Regulatory Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with UAE Central Bank (CBUAE) information security and risk management regulations
  </li>
  <li>
   Monitor regulatory updates and assess their impact on the organization
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Risk Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Identify, assess, evaluate, and mitigate IT Security risks by conducting information security risk assessments and maintain centralized risk registers
  </li>
  <li>
   Track risk mitigation actions and report the security risk posture to management
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Audit &amp; Compliance Management
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Ensure compliance with legal, regulatory, and contractual requirements
  </li>
  <li>
   Coordinate internal audits, external certification audits, and regulatory assessments (ISO 27001, ISO 27005, NIST, PCI DSS, etc.)
  </li>
  <li>
   Track audit findings and ensure timely remediation and closure
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Security Awareness &amp; Training
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Oversee organization-wide security awareness and compliance training programs
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in:
  </li>
  <li>
   Engineering
  </li>
  <li>
   Information Security
  </li>
  <li>
   Computer Science
  </li>
  <li>
   IT Risk Management or a related discipline
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience &amp; Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   8-12 years of experience in Cybersecurity, Information Security Governance, Risk Management and Compliance Audit
  </li>
  <li>
   Deep understanding of frameworks like ISO 27001, PCI-DSS, DESC ISR, etc
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CISSP
  </li>
  <li>
   CISM
  </li>
  <li>
   CISA
  </li>
  <li>
   CRISC
  </li>
  <li>
   ISO 27001 Lead Implementer / Lead Auditor
  </li>
 </ul>
</div>


Information Security Risk & Compliance Manager

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving business objectives. This position acts as senior level IS resource having strong background of Network and Cyber Security functions. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Information Security Risk Management &amp; Assessments (Hands-On)
  </li>
  <li>
   Lead and perform end-to-end IT Risk Assessments, including inherent risk identification, control design and evaluation of operating effectivness, residual risk rating and risk treament recommendations.
  </li>
  <li>
   Assess risks across Infrastructure (on-prem, cloud, hybrid), Applications and Systems, data security and privacy, identity and access management, change and configuration management etc.
  </li>
  <li>
   Develop and maintain risk registers, risk heatmaps, and executive-level risk reporting.
  </li>
  <li>
   Support internal and external audits by providing risk documentation and remediation evidence.
  </li>
  <li>
   Supply Chain &amp; Third-Party Risk Management
  </li>
  <li>
   Conduct Supply Chain / Third-Party IT Risk Assessments for vendors, partners, and service providers.
  </li>
  <li>
   Evaluate vendor risks related to Information Security, Data Protection &amp; Privacy, Business Continuity and resilience, sub-contractor and fourth party risks.
  </li>
  <li>
   Review and assess Vendor security questionnaires, independent audit reports such as SOC2, ISO 27001, PCI DSS, Penetration Test Summaries, ISO 42001 for AI Service Providers etc.
  </li>
  <li>
   Collaborate with Procurement, Legal, and Compliance teams to define risk-based onboarding criteria, support contract security clauses, track vendor risk remediation activities etc.
  </li>
  <li>
   AI Risk Assessments &amp; AI System Impact Assessments
  </li>
  <li>
   Lead and perform AI Risk Assessments across AI/ML systems, including but not limited to model risks, data quality and bias risks, secuirty and adversarial risks, privacy and data protection risks, ethical and responsible AI risks etc.
  </li>
  <li>
   Conduct AI System Impact Assessments (AISIAs) to evaluate impact on individuals and customers, regulatory and compliance implications, business and reputational risks etc.
  </li>
  <li>
   Align AI risk activities with relevant frameworks and regulations, such as ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework, Applicable data protection and AI regulations etc.
  </li>
  <li>
   Partner with AI, Data Science, Legal, and Product teams to embed risk controls into AI system lifecycles.
  </li>
  <li>
   Team Leadership &amp; Management
  </li>
  <li>
   Manage, coach, and mentor team members.
  </li>
  <li>
   Review and approve risk assessment deliverables to ensure quality and consistency.
  </li>
  <li>
   Allocate work, set priorities, and track progress against agreed timelines.
  </li>
  <li>
   Provide performance feedback, skill development guidance, and technical direction.
  </li>
  <li>
   Promote standardization of risk assessment methodologies, templates, and reporting.
  </li>
  <li>
   Stakeholder Engagement &amp; Reporting
  </li>
  <li>
   Act as a trusted risk advisor to technology, business, and senior leadership stakeholders.
  </li>
  <li>
   Present risk findings and recommendations to IT leadership, Risk committee, Senior management etc.
  </li>
  <li>
   Support the development of risk policies, standards, and procedures.
  </li>
  <li>
   Drive a culture of risk awareness and accountability across the organization.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 EducationBachelors/Masters Degree in IT/CS/Software Eng./TelecomExperience8 - 12 yearsSkills and Abilities5+ years of hands on experience in IT/Information Security Risk Management
 <br/>
 <br/>
 Strong understanding of ITRM concepts, methodologies, controls and architectures. Cloud.
 <br/>
 <br/>
 Hands-on experience with Third-Party/Supply Chain Risk Assessments
 <br/>
 <br/>
 Knowledge of risk frameworks such as ISO 27005, NIST CSF etc.
 <br/>
 <br/>
 Strong presentation and communication skillsReporting Time5pm to 2am (PKST)
</div>


Principal, IT Security & Compliance, IT

<div>
 <p>
  Job ID: 522658
 </p>
 <p>
  <br/>
 </p>
 <p>
  CRH is a leading global diversified building materials group, employing over 75,800 people at more than 3,160 locations in 29 countries. CRH is the leading building materials company in North America and the world. We manufacture and distribute a diverse range of superior building materials, products, and solutions, which are used extensively in construction projects of all sizes.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Job Summary
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The Americas Security Manager will report to the Director of Security &ndash; Americas and provides a unique opportunity to mature and shape CRH&rsquo;s security operations across the U.S., Canada, and Mexico. This role requires a thorough understanding of security risk management and the ability to proactively assess and respond to potential threats. The role also provides significant scope to influence security culture, engage with senior leadership, and protect CRH&rsquo;s most valuable assets &mdash; its people, facilities, and reputation. This role will work closely with Health &amp; Safety, Legal, HR, Audit &amp; Compliance, Internal Controls, Facilities, and Information Security, and requires travel &mdash; upwards of two weeks per month.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Job Location
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  This a remote role - we are looking for someone in this role that is based in a state in the Eastern Time Zone. Atlanta or New York City metro area is preferred.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Job Responsibilities
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Program Development
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Partner with the Director of Security &ndash; Americas to implement security strategies aligned with industry best practices and internal policies.
  </li>
  <li>
   Develop, implement, and maintain security procedures, processes, and guidelines to ensure consistent protection across offices, manufacturing plants, and distribution facilities.
  </li>
  <li>
   Develop metrics, dashboards, and reports to measure security performance and drive accountability.
  </li>
  <li>
   Support and drive proactive security initiatives by implementing best practices and aligning the program with global standards.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Physical Security &amp; Operations
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Utilizing a risk-based approach, conduct site security risk assessments to identify vulnerabilities and recommend mitigation strategies for identified risks.
  </li>
  <li>
   Provide guidance and assist in the implementation of physical security systems (access control, video surveillance, intrusion detection systems), ensuring effective design, maintenance, and integration.
  </li>
  <li>
   Support physical security planning for office relocations, expansions, closures, and capital projects.
  </li>
  <li>
   Provide security coordination and oversight for company events, high-profile meetings, and special projects.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Incident Response &amp; Crisis Management
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Lead and coordinate responses to internal and external security incidents, including theft, fraud, workplace violence, and emergency situations.
  </li>
  <li>
   Support business continuity, crisis management, and emergency preparedness planning, including drills and exercises.
  </li>
  <li>
   Serve as a trusted advisor to leadership during crisis situations, providing real-time intelligence and recommendations.
  </li>
  <li>
   Consult with law enforcement, emergency services, and regulatory agencies during critical events.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Intelligence &amp; Investigations
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Build and maintain intelligence networks with law enforcement, regulatory agencies, and industry peers.
  </li>
  <li>
   Identify and stay abreast of local, regional, and geopolitical emerging risks and as a result, recommend mitigation strategies to safeguard personnel, facilities, and supply chains.
  </li>
  <li>
   Conduct risk assessments, threat analyses, and security reviews to identify vulnerabilities and implement mitigation strategies.
  </li>
  <li>
   Lead and document investigations into misconduct, fraud, and other security-related incidents.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Protective Services &amp; Travel Security
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Support CRH&rsquo;s travel security and event protection programs to ensure the safety of CRH employees.
  </li>
  <li>
   Develop and deliver travel safety briefings and assist in coordinating the travel safely program.
  </li>
  <li>
   Serve as a point of contact for CRH travelers during emergency situations in the Americas.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Training &amp; Awareness
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Develop and deliver security awareness and education programs for employees at all levels.
  </li>
  <li>
   Conduct seminars, workshops, and tabletop exercises to strengthen preparedness and response capabilities.
  </li>
  <li>
   Champion a culture of security awareness, accountability, and professionalism across the region.
  </li>
  <li>
   Other duties as assigned
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Job Requirements
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree required - advanced degree preferred.
  </li>
  <li>
   10+ years in positions of increasing responsibility related to applicable security operational disciplines and investigations, including corporate security, military, or law enforcement experience.
  </li>
  <li>
   Demonstrated expertise and proven history in evaluating risk, physical security operations, incident/crisis management, insider risk detection &amp; mitigation, investigations, and protective services.
  </li>
  <li>
   Experience working in diverse environments including offices, manufacturing, distribution, and supply chain facilities.
  </li>
  <li>
   Strong knowledge of physical security systems (access control, CCTV, intrusion alarms, etc.).
  </li>
  <li>
   Experience conducting investigations, risks assessments, site vulnerability assessments, and implementing insider risk (e.g., workplace violence, theft, fraud) prevention strategies.
  </li>
  <li>
   Strong understanding of travel security, executive protection, and event security best practices.
  </li>
  <li>
   Exceptional interpersonal and communication skills; able to engage and build trust and influence at all organizational levels.
  </li>
  <li>
   Excellent investigative, analytical, and problem-solving abilities; capable of managing multiple priorities under pressure.
  </li>
  <li>
   Collaborative mindset with the ability to work cross-functionally in a matrixed global environment.
  </li>
  <li>
   High integrity and a proven history of demonstrating sound judgment.
  </li>
  <li>
   Professional certifications (CPP, PSP, CISSP, CERT ITPM, etc.) are strongly desirable.
  </li>
  <li>
   Fluency in English required, Spanish proficiency highly desirable.
  </li>
  <li>
   Must be able to travel across the Americas (~50%).
  </li>
  <li>
   Flexibility to respond to incidents outside of standard business hours.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Compensation
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Base Salary - $140,000-$165,000 per year
  </li>
  <li>
   20% Annual Bonus opportunity
  </li>
  <li>
   401(k) plan / group retirement savings program
  </li>
  <li>
   Short-term and long-term disability benefits
  </li>
  <li>
   Life insurance
  </li>
  <li>
   Health, dental, and vision insurance
  </li>
  <li>
   Paid time off
  </li>
  <li>
   Paid holidays
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    What CRH Offers You
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Highly competitive base pay
  </li>
  <li>
   Comprehensive medical, dental and disability benefits programs
  </li>
  <li>
   Group retirement savings program
  </li>
  <li>
   Health and wellness programs
  </li>
  <li>
   An inclusive culture that values opportunity for growth, development, and internal promotion
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    About CRH
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.
 </p>
 <p>
  <br/>
 </p>
 <p>
  If you&rsquo;re up for a rewarding challenge, we invite you to take the first step and apply today! Once you click apply now, you will be brought to our official employment application. Please complete your online profile and it will be sent to the hiring manager. Our system allows you to view and track your status 24 hours a day. Thank you for your interest!
 </p>
 <p>
  <br/>
 </p>
 <p>
  CRH is an Affirmative Action and Equal Opportunity Employer.
 </p>
 <p>
  <br/>
 </p>
 <p>
  EOE/Vet/Disability
 </p>
 <p>
  <br/>
 </p>
 <p>
  CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.
 </p>
 <p>
  <br/>
 </p>
 <p>
  AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.
 </p>
</div>


Security Manager - Americas

CardWorks Servicing

<p>Join our team - and take the next step in achieving a fulfilling career!<br/></p><p>What We Do<br/></p><p>At CardWorks, we aim to help people connect with possibility and opportunity using our financial servicing expertise. Building meaningful, long-term relationships with consumers, our employees, and our clients is what matters most.<br/></p><p>Who We Are<br/></p><p>CardWorks, Inc. is a diversified consumer finance service provider and parent company of CardWorks Servicing, LLC, Merrick Bank and Carson Smithfield, LLC.<br/></p><p>CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.<br/></p><p>Merrick Bank is an FDIC-insured Utah Industrial Loan Bank. Merrick operates three main business lines: credit cards, recreational lending, and merchant services.<br/></p><p>Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.<br/></p><p>Position Summary:<br/></p><p>The Security Compliance Manager is an individual contributor responsible for operationalizing, executing, and maturing the enterprise security compliance program. This role reports to the Director of Security Risk &amp; Compliance and ensures that the organization&rsquo;s security compliance strategy is translated into effective operational processes, assessments, and workflows. Core responsibilities include managing compliance operations, executing assessments, reviewing controls, supporting audit readiness, coordinating documentation and evidence, and ensuring accuracy and consistency across compliance systems and reporting.<br/></p><p>Essential Functions:<br/></p><p>Compliance Program Execution<br/></p><p>Execute and continuously improve enterprise security compliance processes and assessments, supporting the strategic direction established by the Manager.<br/>Operate and maintain the security compliance technology platform, ensuring assessments, evidence collection, and issue tracking are completed accurately and on schedule.<br/>Coordinate compliance assessment activities and ensure required documentation is complete and aligned with standards.<br/>Create, manage, and maintain standardized templates, procedures, workflows, and reporting to support consistent compliance operations.<br/></p><p>Security Exception Management<br/></p><p>Execute detailed assessments of security exception requests, documenting risks, mitigating controls, approvals, and expiration tracking, in accordance with governance defined by the Director.<br/>Track exception approvals, expirations, and remediation requirements, ensuring timely reminders, escalations, and accuracy of exception data.<br/></p><p>Security Issue Escalation &amp; Tracking<br/></p><p>Manage execution of the Security Compliance Finding and Issue Escalation process, ensuring control gaps and audit findings are documented, monitored, and remediated on schedule.<br/>Maintain and operationalize workflow steps aligned to governance requirements defined by the Director, ensuring appropriate escalation of overdue or high‑risk issues.<br/>Align information security issue tracking with Enterprise Risk Management processes and escalate high‑risk issues through established governance forums.<br/></p><p>Documentation Governance<br/></p><p>Oversee the Information Security documentation governance program, ensuring policies, standards, procedures, and guidelines are accurate, current, and aligned with regulatory, customer, and internal control requirements.<br/>Implement and maintain the documentation lifecycle processes, including drafting, review, approval, publication, version control, retention, and retirement.<br/>Coordinate updates to documentation to ensure alignment with applicable frameworks such as CRI, NIST CSF, PCI DSS, and CIS 18, reflecting changes in technology, controls, and risk posture.<br/>Track documentation quality, exceptions, gaps, and remediation activities; prepare reports and metrics to support leadership visibility and compliance oversight.<br/>Partner with security, risk, IT, and compliance stakeholders to ensure documentation supports audits, assessments, and ongoing control operation.<br/></p><p>Education and Experience<br/></p><p>8+ years of experience in information security, risk management, compliance, or related disciplines.<br/>Bachelor&rsquo;s degree in IT or related field preferred or equivalent work experience in lieu of degree.<br/>Working knowledge of security frameworks such as Cyber Risk Institute, NIST CSF, CIS Controls, and PCI DSS along with experience applying these and other industry-specific regulations to projects and infrastructure.<br/>Experience in collaborating across diverse teams, including IT, business units, and external stakeholders, to address security requirements and align with project objectives.<br/>Strong understanding of security risk assessment methodologies, controls implementation, and process optimization, with a track record of successfully mitigating risks and enhancing security practices.<br/></p><p>Summary of Qualifications:<br/></p><p>Strong working knowledge of major security frameworks and regulatory requirements, including CRI, NIST CSF, PCI DSS, and CIS Controls, with experience aligning compliance platforms to support assessments and evidence management.<br/>Skilled in optimizing compliance workflows, dashboards, templates, and reporting to enhance operational efficiency and audit readiness.<br/>Proficient with core security technologies such as vulnerability management, encryption, and identity and access management.<br/>Strong analytical and communication skills, able to identify trends, explain complex technical and regulatory concepts, and support cross‑functional collaboration.<br/>Highly organized, detail‑oriented, and capable of managing multiple priorities while improving processes, automation, and program scalability.<br/></p><p>Ideally, the qualified candidate will work at the following location(s): South Jordan, UT; Woodbury, NY; Horsham, PA; Pittsburgh, PA; Orlando, FL. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role.<br/></p><p>The salary range for this position, if located in NY Metro/NY State is $128,490 to $142,767. However, please note that the salary range will vary for other geographic areas.<br/></p><p>#INDHP<br/></p><p>Our Employee Value Proposition<br/></p><p>Competitive Pay, including a Bonus Target or Variable Pay Incentive Program<br/>Benefits Package -Medical, Dental, and Vision (plus much more)<br/>401(k) Plan with Company Match<br/>Short- &amp; Long-Term Disability<br/>Wellness Programs<br/>Group Life and AD&amp;D Insurance<br/>Paid Vacation, Sick Days and bank Holidays<br/>Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition<br/></p><p>We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.<br/></p><p>We are an equal opportunity employer, and we evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status or any other legally protected characteristic. We will conduct a thorough background check for all hires in compliance with applicable laws.<br/></p>

Manager Security Compliance

Joby Aviation

<div>Company Overview:
<div>
Joby Aviation is seeking a passionate and experienced aviation security professional to join our UAE team in launching Joby&rsquo;s first urban air mobility (UAM) air taxi service. This service, launched in cooperation with Dubai's Road and Transport Authority (RTA), will feature Joby&rsquo;s all-electric vertical takeoff and landing aircraft (eVTOL) and is expected to be amongst the first eVTOL UAM services in the world. You will report to Joby&rsquo;s UAE General Manager and will work closely alongside Joby&rsquo;s US-based Head of Safety and US-based Head of Security.</div><br>
<div></div>
Overview:
<div>
As Security Manager, you will be the primary focal point for all security matters across our UAE operations, including aviation security, vertiport security, facility security, and personnel security. While this position does not carry Post Holder accountability under the Air Operator Certificate (AOC), it holds significant responsibility for the day-to-day coordination, management, and continuous improvement of our security posture, and serves as the key interface with UAE regulatory authorities, including the GCAA and DCAA.</div><div></div><div><br>
You must be a problem solver, a strategic thinker, and a driven individual who is equally comfortable engaging with regulators, managing incident response, and embedding a culture of security awareness across a dynamic multi-disciplinary operation.</div><div></div><div><br>
This full-time role is located in Dubai, UAE, and remote work will not be permitted. Over 15% of travel is expected to the United States, or other locations as requested.</div><br>
<div></div>
Responsibilities:
<p><b>
Responsibilities</b></p><br>
<div></div><ul><li>
Act as the company&rsquo;s Security focal point in the UAE, promoting a security-first culture across all operations and ensuring security considerations are integrated with flight operations, aircraft maintenance, training, vertiport operations, and associated external agencies</li><li>
Oversee security risk assessments across all operational areas &ndash; including aviation, vertiport, and facility domains &ndash; and implement appropriate mitigation measures for identified threats</li><li>
Manage and investigate all security incidents, breaches, and irregularities; prepare reports and implement corrective and preventive actions</li><li>
Manage physical security across all company facilities in the UAE, including offices, maintenance hangars, and training centers</li><li>
Develop, implement, and maintain the Security Management System (SeMS), in compliance with applicable UAE regulations, ICAO Annex 17 standards, and company policy, ensuring documentation, processes, and performance metrics are current and effective</li><li>
Monitor the evolving security threat landscape and advise the UAE General Manager on potential impacts to operations</li><li>
Serve as the day-to-day point of contact with UAE regulatory authorities (GCAA, DCAA, Dubai Police, AD Police and others) on all security-related matters</li><li>
Partner with vertiport operator(s) and the RTA to align security standards and ensure consistency across all operational sites</li><li>
Support internal and external security audits and ensure timely resolution of findings</li><li>
Develop and deliver security awareness training for all UAE-based staff, as well as conduct security emergency response drills</li></ul>
Required:
<p><b>
Required</b></p><br>
<p></p><ul><li>
 7+ years of security experience</li><li>
Sound working knowledge of UAE aviation regulations (GCAA/DCAA), ICAO Annex 17, and aviation security management principles</li><li>
Experience conducting security risk assessments and developing security plans across multiple operational domains</li><li>
Familiarity with physical and facility security principles, including access control, perimeter security, and surveillance systems</li><li>
Working exposure to the GCAA, DCAA, FAA, EASA, or equivalent military/government aviation authority</li><li>
Have appropriate Security Management System (SeMS) knowledge and experience</li><li>
Confident in the delivery of written reports, risk assessments, and briefings to senior management</li><li>
Good organisational skills, including project management</li><li>
Fluent in English (ICAO Level 4 minimum)</li><li>
Arabic speaker</li><li>
Ability to pass AVSEC security clearance</li><li>
Eligibility to work in the UAE</li><li>
Ability to travel internationally, including eligibility to obtain a U.S. business travel visa.</li></ul>
Desired:
<p><b>
Desired</b></p><br>
<p></p><ul><li>
 10+ years of aviation security experience</li><li>
Advanced degree with an Aviation Security specialty, or equivalent experience</li><li>
Formal security or safety training (Military, FAA, GCAA, EASA, ICAO, or equivalent)</li><li>
Law enforcement or military security experience</li><li>
Prior experience as an appointed Post Holder for SMS and/or Security under an AOC</li><li>
Prior experience working with UAE governmental or aviation transportation authorities</li><li>
Experience in vertiport, heliport, or non-traditional aviation infrastructure environments</li><li>
Emirati National</li></ul></div><div></div>

Manager – Security

Bechtel

<div><p><b>Requisition ID: 292696</b></p><ul><li><b>
Relocation Authorized: None</b></li><li><b>
Telework Type: Part-Time Telework</b></li><li><b>
Work Location: Reston, VA</b></li></ul><p></p><div><div><div><h2 class="jobSectionHeader"><b><br>
Extraordinary teams building inspiring projects:</b></h2></div><div><p>
Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seven continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.</p><p>
Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers' objectives to create a lasting positive impact. We serve the Infrastructure; Nuclear, Security &amp; Environmental; Energy; Mining &amp; Metals, and the Manufacturing and Technology markets. Our services span from initial planning and investment, through start-up and operations.</p><p>
Core to Bechtel is our Vision, Values and Commitments. They are what we believe, what customers can expect, and how we deliver. Learn more about our extraordinary teams building inspiring projects in our Impact Report.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Summary:</b></h2></div><div><p>
The Manager, Cybersecurity Risk Management focuses efforts on managing and reporting on cyber risks globally across Bechtel, playing a crucial role in assessing and managing risk, and driving mitigation plans associated with our wider cybersecurity program. The manager drives a comprehensive risk management program, while supporting peer cybersecurity teams in maturing and standardizing their programs. The manager identifies and mitigates security risks; provides subject matter expertise and technical guidance to process owners; partners with Service Owners, GBU Managers, IT Architecture, Operations and Support, and Software Development, to contribute to the reporting of a comprehensive view of the security risk posture and its impact on the business.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Major Responsibilities:</b></h2></div><div><p>
Risk Oversight</p><ul><li>
Develops and maintains a comprehensive cybersecurity risk management strategy, leads enterprise-wide cyber risk assessments and mitigation / remediation activities.</li><li>
Collaborates with IT, legal, compliance, and business units to ensure risk mitigation strategies are embedded in operations.</li><li>
Monitors emerging threats and risk posture and activities accordingly.</li><li>
Presents risk analysis, metrics, and mitigation plans to management and stakeholders.</li><li>
Identifies risk and mitigating controls for information security exceptions based on adherence to relevant company policies, standards, baselines, and industry standards (e.g., ISO 27001, NIST, GDPR, HIPAA, CIS, FedRAMP).</li><li>
Mentors and develops junior risk analysts and cybersecurity professionals.</li><li>
Assists with the administration and maintenance of the ServiceNow GRC platform.</li></ul><p>
Strategic Leadership, Business Partnership &amp; Enablement</p><ul><li>
Translates risk insights into strategic decisions and enterprise-wide policies.</li><li>
Contributes to the design of cybersecurity strategies by advising on risk reduction priorities related to exception and risk register trends.</li><li>
Develops metrics to track exception mitigation rates, approval / review rates, aging, and SLA compliance.</li><li>
Drives initiatives that reduce recurring exception requests through enterprise-wide solutions.</li></ul><p>
Analytics</p><ul><li>
Monitors the effectiveness of the information security exceptions process in accordance with agreed upon metrics and performance measures to drive continuous improvements.</li><li>
Conducts root cause analysis on recurring issues to enhance process efficiency and reduce exception requests.</li><li>
Collaborates with cross-functional teams to gather, interpret, and validate mitigating controls to ensure accuracy and relevance.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Education and Experience Requirements:</b></h2></div><div><ul><li>
Requires bachelor&rsquo;s degree plus 8+ years experience in information security risk, with at least 3 years in a risk management role or similar function.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Required Knowledge and Skills:</b></h2></div><div><ul><li>
Strong knowledge of cybersecurity frameworks, company policies, and regulatory requirements.</li><li>
Strong expertise across commercial and government cloud services (AWS, Azure, GCP, OCI, etc.), on-premises and application environments.</li><li>
Experience with tools such as ServiceNow, GRC tools, Power BI, and cloud technologies.</li><li>
Strong knowledge of risk frameworks (e.g., ISO 27005, NIST, ISO, PCI, SOX, etc.).</li><li>
Proven ability to translate complex technical concepts into plain language for decision-makers.</li><li>
Skilled in preparing polished deliverables that support informed decision-making.</li><li>
Team player who builds trust across technical and non-technical teams.</li><li>
Demonstrated ability to work independently, adapt quickly, and drive tasks forward with limited direction.</li><li>
Strong project management and delegation skills across diverse, cross-functional initiatives</li></ul><p></p><p><br>
Preferred:</p><ul><li>
Certifications such as CISSP, CISM, CRISC, or CISA.</li><li>
5+ years of prior experience in EPCM (Engineering, Procurement, Construction / Project Management). Prefer global company background and/or Fortune 500 and/or EPC industry.</li><li>
Comfortable working in a highly iterative environment, both structured and unstructured.</li><li>
Metrics and visualization tools knowledge a plus (i.e., ServiceNow, Power BI, Tableau,).</li><li>
Advanced user of M365 Suite to prepare all project plans, deliverables, presentations, reports, and findings.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
Total Rewards/Benefits:</b></h2></div><div><p>
For decades, Bechtel has worked to inspire the next generation of employees and beyond! Because our teams face some of the world's toughest challenges, we offer robust benefits to ensure our people thrive. Whether it is advancing careers, delivering programs to enhance our culture, or providing time to recharge, Bechtel has the benefits to build a legacy of sustainable growth. Learn more at Bechtel Total Rewards</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Diverse teams build the extraordinary:</b></h2></div><div><p>
As a global company, Bechtel has long been home to a vibrant multitude of nationalities, cultures, ethnicities, and life experiences. This diversity has made us a more trusted partner, more effective problem solvers and innovators, and a more attractive destination for leading talent.</p><p>
We are committed to being a company where every colleague feels that they belong-where colleagues feel part of &quot;One Team,&quot; respected and rewarded for what they bring, supported in pursuing their goals, invested in our values and purpose, and treated equitably.</p></div></div></div><p></p><p><b><i><br>
Bechtel is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, disability, citizenship status (except as authorized by law), protected veteran status, genetic information, and any other characteristic protected by federal, state or local law. Applicants with a disability, who require a reasonable accommodation for any part of the application or hiring process, may e-mail their request to </i></b><b>acesstmt@bechtel.com</b></p></div>

Manager, Cybersecurity Risk Management

Abacus Technology

<div>Overview:
<div>
Abacus Technology is seeking an Information System Security Manager (ISSM) to ensure system and application deliverables meet all required cyber security policies and regulations for the Technical Advisory and Assistance Services (TAAS) program at Hanscom AFB. This is a full-time position.</div>
Responsibilities:
<ul><li>Support system/application Assessment and Authorization (A&amp;A) efforts, to include assessing and guiding the quality and completeness of A&amp;A activities, tasks, and resulting artifacts mandated by governing National, DoD, and Department of the Air Force policies (i.e., RMF).</li><li>
Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.</li><li>
Conduct risk and vulnerability assessments and inspections of planned and installed information systems to identify vulnerabilities, risks, and protection needs.</li><li>
Evaluate threats and vulnerabilities to information systems to ascertain the need for additional safeguards.</li><li>
Evaluate system sources of changes such as Deficiency Reports (DRs), Problem Reports (PRs), Change Requests/Proposals (CRs/CPs), and AF Form 1067s; provide inputs to the root cause analysis reporting and the formulation of recommended solution from alternatives; determine the security impacts of proposed or actual changes to the system, environment, threats, and vulnerabilities; and if any, document in written reports the changes/revisions to the system&rsquo;s RMF artifacts.</li><li>
Review and provide inputs to modification packages, program/system documents and support agreements updates, and communications and network infrastructure upgrades to ensure proper cybersecurity configuration modification management; implementation of technical, managerial, operational requirements; and support requirements (e.g. planning, testing, test infrastructure, documentation, training, etc.) are identified.</li><li>
Review system test plans and test results and if necessary, observe system testing for security control implementation in accordance with cybersecurity policies, guidance, and plan.</li><li>
Perform security impact analysis on any system change and appropriately prepare letters of assurance, security impact letters, and risk assessment letters to include exceptions, deviations, or waivers to cybersecurity requirements when applicable.</li><li>
Continuously monitor intelligence and open-source information for vulnerabilities affecting systems, assess risk, and provide POA&amp;M recommendations.</li><li>
Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations&rsquo; visions and goals.</li><li>
Conduct systems security monitoring, evaluations, audits, and reviews.</li><li>
Recommend systems security contingency plans and disaster recovery procedures.</li><li>
Recommend and implementing programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.</li><li>
Participate in network and systems (to include cryptographic) design to ensure implementation of appropriate systems security policies.</li><li>
Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.</li><li>
Assess security events to determine impact and implementing corrective actions.</li><li>
Ensure the rigorous application of cybersecurity and cryptographic policies, principles, and practices throughout the system development lifecycle.</li><li>
Author, monitor, and record system information in applicable databases.</li><li>
Prepare and record system, security status, and portfolio management information into the Air Force Information Technology Investment Portfolio Suite (referred to as ITIPS) for FISMA; Security, Interoperability, Supportability, Sustainability, Usability (SISSU); Clinger Cohen Act; and other statutory compliance.</li><li>
Author, review, certify, and/or maintain security management plans and RMF package artifacts including but not limited to: RMF Implementation Plans, System Security Management Plans, Information Support Plans, Program Protection Plans (PPPs), Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Vulnerability Management Plans, Common Control Packages, Security Concepts of Operations, OPSEC Plans, Authority-to-Connect guest system packages, and other system/network security related documents.</li><li>
Support and assist external teams in the evaluation of systems Cybersecurity posture to include teams performing non-regular cyber tests, war-games, cyber penetration tests, and cyber studies conducted by the NSA, DISA, Air Force Audit Agency, or other organizations.</li><li>
Support the development, coordination, and implementation of cybersecurity-related special projects and taskers, e.g., Defensive Cyber Operations (DCO), Higher Headquarter requests, Notice to Airmen (NOTAMs), Technical Change Orders (TCOs), System Program Office (SPO), 16th AF, USSTRATCOM, USCYBERCOM, SAF/A6, SpOC/S6, AFGSC/A6, 460 Space Wing, and AFNWC/NC efforts.</li></ul>
Qualifications:
<div>
10+ years experience in cyber security or information assurance. Bachelor&rsquo;s degree in a related field. Must hold one of the following certifications: CISSP, CISM, GSLC, or CCISO. Experience with the certification and accreditation process. Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems. Knowledge of intrusion prevention and network access control tools/systems. Understanding of system audit principles and security risk assessment. Strong understanding of security policy advocated by the U.S. Government including the Department of Defense and appropriate civil agencies, e.g., NIST. Able to perform work that involves ensuring the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools. Knowledge of cryptography and cryptographic key management concepts. General experience includes development of both common user and special purpose command and control/information systems with increasing responsibilities in the scope and magnitude of the systems for which solutions <i>have </i>been implemented. Must have a solid understanding of network infrastructure and mission assurance. Familiar with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB. Must have solid communications skills and be capable of working with all levels of an organization. Must be a US Citizen and hold a current Top Secret clearance with SCI access (TS/SCI).</div><div></div><div><br>
The projected compensation range for this position is $197,900-$220,000. There are multiple factors that can impact a final salary, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (if remote or different from the stated location for this position), education and certifications as well as Federal Government Contract Labor categories. In addition, Abacus Technology offers a benefits package that includes: Health and Dental Insurance; 401(k) and Matching; Life Insurance; Short- and Long-Term Disability; Paid Time Off; Paid Holidays; and Professional Membership, Technical Training, Certification, and Education Assistance.</div><div></div><div><b><i><br>
Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.</i></b></div><div></div><div><b><br>
EOE/M/F/Vet/Disabled</b></div></div>

Information Systems Security Manager (ISSM)

Search 10000+ Security risk manager jobs near you this April. New roles added regularly across leading industries. Apply today.