Cyber Risk Management Lead
Key Responsibilities
• Lead the Cyber Risk Management domain through cross-functional and matrix-based collaboration, without direct people management responsibilities.
• Provide professional guidance and subject matter expertise to cybersecurity risk specialists and stakeholders across the organization.
• Drive the organization's cyber risk management strategy, framework, and methodology.
• Lead cross-functional cyber risk initiatives, ensuring alignment between business, technology, and cybersecurity stakeholders.
Requirements
- At least 5 years of experience experience in leading cross-functional cybersecurity initiatives and providing professional guidance in a matrix organizational structure.
- Strong ability to influence stakeholders, drive collaboration, and lead complex processes without direct managerial authority.
• Demonstrated ability to coordinate cybersecurity experts and multidisciplinary teams across the organization.
• In-depth understanding of cybersecurity architecture, application security, infrastructure, cloud security, and identity management.
• Experience reviewing technology architectures and analyzing security risks in complex systems.
• Strong knowledge of leading risk management frameworks and standards, including NIST, ISO 27001, and FAIR .
• Experience leading risk monitoring and control processes, including tracking remediation plans and information security findings.
• Proven ability to present risk assessments, risk exposure, and actionable insights to senior management.
• Strong ability to lead cross-functional initiatives and influence stakeholders without direct authority.
• Experience working with regulatory bodies and internal and external auditors.
Advantages
• Familiarity with Threat Modeling methodologies and technical risk analysis.
• Knowledge of cloud environments ( AWS, Azure, GCP ) and modern technology architectures.
• Professional certifications such as CISSP, CISM, or CRISC .
Sourced from a public career listing. Jobverse is an aggregator, not the employer.