Manager, Cybersecurity Risk Management (Columbia, MD, US, 21044)

Job Description

Grace is seeking a Manager, Cybersecurity Risk Management to join our Global Cybersecurity Team! This role reports to Deputy CISO located at Columbia, MD.

We are looking for a strategic, highly skilled Cybersecurity Risk Manager to guide and enhance our cybersecurity risk management capabilities. In this senior role, you will serve as a trusted advisor to technology and business leaders, spearheading initiatives to identify, evaluate, and mitigate cybersecurity risks across Standard Industries.

Responsibilities

• Lead the development, execution, and ongoing enhancement of the enterprise cybersecurity risk management program across operating companies under Standard Industries.
• Oversee the creation and maintenance of risk registers, ensuring risks are thoroughly documented, prioritized, and tracked until resolution.
• Conduct advanced security control assessments to measure effectiveness, ensure compliance, and align with internal and external standards.
• Collaborate with business units, IT leaders, and cybersecurity teams to provide expert guidance on risk mitigation strategies and improvements to controls.
• Drive the refinement of organization-wide control frameworks, audit mechanisms, and compliance monitoring processes.
• Manage and advance third-party risk management activities, including risk assessments, scoring, and continuous monitoring programs.
• Advise leadership on risk trends, new and emerging threats, and recommended controls by leveraging data-driven insights and professional expertise.
• Oversee the preparation and delivery of risk reports, dashboards, and metrics for executive stakeholders.
• Manage and mentor junior risk team members and support the development of cybersecurity governance and awareness initiatives.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related discipline; advanced degree or certifications such as CISSP, CISM, or CRISC are highly desirable.
• 5–8 years of professional experience in cybersecurity, IT audit, or risk management, demonstrating expertise with enterprise risk frameworks like NIST CSF or ISO 27005.
• Track record of performing in-depth control assessments, vendor risk evaluations, and security governance functions.
• Outstanding verbal, written, and interpersonal communication skills, with the ability to effectively influence stakeholders across all organizational levels.
• Strong analytical abilities and hands-on experience with enterprise IT and cloud-based environments.
• Proven capability to lead cross-functional projects and manage several priorities concurrently.
• Ability to travel up to 25% as needed
  
  

Preferred Qualifications

• Strong understanding of IT infrastructure, cloud environments, and associated technical controls
• Experience with Governance, Risk, and Compliance and IT Service Management platforms
• Demonstrated executive presence with the ability to effectively communicate with senior leadership, influence decision-making, and build trusted partnerships across business and technology functions.

Benefits

• Medical, Dental, Vision Insurance
• Life Insurance and Disability
• Grace Wellness Program
• Flexible Workplace with maximum overlap with the core hours
• Retirement Plans 
• 401(k) Company Match
• Paid Vacation and Holidays
• Parental Leave
• Tuition Reimbursement
• Company Donation Match Program.