Cybersecurity and Technology Risk Manager

• In your day-to-day role you will serve as the dedicated Risk Manager for an assigned technology portfolio, owning end-to-end issue and risk management lifecycle including identification, triage, documentation, remediation planning, and closure validation, while partnering with functional areas across the technology organization to manage the Enterprise issue and risk remediation programs.
• Own and drive risk reduction for your assigned portfolio, ensuring all identified risks and control gaps are accurately logged, prioritized by severity and business impact, assigned to accountable owners, and tracked through to resolution within defined SLAs.
• Recognized as a security expert, independently resolving the most complex security challenges and providing strategic direction on problem resolution across the security and technology domain.
• Possess a keen awareness of the broader impact of decisions, with initiatives often leading to enterprise-wide improvements that enhance security practices and operational efficiency.
• Partner with team members through complex challenges, while maintaining a focus on high-impact results.
• What do you need to bring
• Knowledge of current and emerging information technologies (e.g., AI / ML); cybersecurity threats and vulnerabilities; risk management processes and practices; industry standard control frameworks and best practices (e.g., NIST, ISO); and prominent cybersecurity and privacy regulations globally.
• Strong work ethic with proven ability to learn quickly, prioritize work, and manage complex deliverables to completion under established deadlines.
• Willingness to drill down into complex topics as needed to understand and validate key tactical or technical details with strategic level implications, and ability to identify and articulate those “big picture” considerations for key audiences.
• Superb consultative, adjudicative, investigative, and influencing skills, including business acumen, stakeholder empathy, and conflict resolution, as well as general comfort working in a dynamic, global, fluid, and matrixed working environment.
• Exceptional verbal and written communication and analysis skills, including experience developing high-quality written analysis, strategy, or policy documents
• Prior involvement in analysis, interpretation, and communication of legal or regulatory technology policy requirements.
• Practiced at targeting and delivering written work products and verbal presentations to varied audiences (e.g., executives, engineers, customers, regulators, etc.)
• Unquestionable professional and ethical integrity, ideally demonstrated through experience with projects of a sensitive, privileged, or confidential nature.
• Ability to approach and understand problems from a statistical or quantitative perspective and draw meaningful, accurate conclusions, as well as scrutinize models and inferences for misleading or overlooked considerations.

• Risk and Issue Management and GRC Platform Proficiency
• Control Frameworks and Regulatory Knowledge
• Quantitative Risk Analysis

• Background in security or technology risk, with the ability to collaborate effectively with the Risk team.
• Strong skills in critical thinking, risk assessment, and risk management, combined with expertise in information security, technology, and cyber risk.

• Master’s Degree in a relevant discipline, such as cybersecurity, business, public policy, economics, statistics, risk management, or computer science; outstanding bachelor’s degree candidates will be considered.
• Certifications preferred: CISM, CISA, CISSP, CGEIT, AAIA, CRISC
• 5+ years total experience in technology or security governance, policy, risk management, and / or compliance roles. 

privacy@aditiconsulting.com