Senior Cyber Risk Manager

Contract Duration - 12 months
Contract type - Contract/ C2C
Location - Remote (EST or PST time zone)
Job Description:-

As the Senior Cyber Risk Manager, you will be responsible for overseeing the identification, assessment, mitigation, and monitoring of technology-related risks within the organization. You will play a pivotal role in ensuring our technology infrastructure remains secure, compliant, and resilient to emerging threats and vulnerabilities. The successful candidate will collaborate closely with cross-functional teams, including IT, security, compliance, and business units, to develop and implement robust risk management strategies and frameworks. Juniper Business Use Only
Responsibilities

- Conduct comprehensive assessments of technology risks associated with the organization's systems, applications, networks, and infrastructure.

- Analyze internal and external risk factors, including emerging threats, regulatory requirements, industry trends, and best practices.

- Develop risk models, metrics, and frameworks to quantify and prioritize technology risks effectively.

- Develop and implement technology risk policies, standards, and procedures in alignment with regulatory requirements and industry standards.

- Ensure compliance with applicable laws, regulations, and guidelines governing technology risk management and information security.

- Monitor regulatory developments and emerging trends to update policies and procedures accordingly.

- Collaborate with IT and security teams to identify and implement adequate controls and safeguards to mitigate technology risks.

- Evaluate the effectiveness of existing controls and recommend enhancements or modifications as needed.

- Facilitate risk mitigation efforts by implementing technical solutions, process improvements, and employee training programs.

- Serve as a trusted advisor to senior management and business stakeholders on technology risk matters, providing timely updates and recommendations.

- Communicate risk assessment findings, trends, and recommendations through comprehensive reports, presentations, and dashboards.

- Foster a culture of risk awareness and accountability across the organization through training, awareness campaigns, and knowledge-sharing initiatives.

Qualifications

- Bachelor's degree in information technology, Computer Science, Risk Management, or a related field; advanced degree or professional certification (e.g., CISA, CISSP, CRISC) Mandatory.

- Minimum of 10 years of experience in technology risk management, cybersecurity, or information security roles.

- Proven expertise in conducting technology risk assessments, developing risk management frameworks, and implementing controls and mitigation strategies.

- In-depth knowledge of regulatory requirements, industry standards, and best practices related to technology risk management and information security (e.g., FAIR, NIST Cybersecurity Framework, ISO 31000, OCTAVE & TARA).

- Strong analytical, problem-solving, and decision-making skills with the ability to evaluate complex issues and develop practical solutions.

- Excellent communication and interpersonal skills with the ability to effectively engage and influence stakeholders at all levels of the organization.

- Demonstrated leadership abilities with a track record of driving results, managing projects, and leading cross-functional teams in a fast-paced, dynamic environment.

Basic Requirements

- Effective verbal and non-verbal communication skills at all levels of the organization

- Leadership teamwork and collaboration

- Discretion

- Problem solving

- Critical Thinking

- Self-initiated/sufficient

- Motivated

Originally posted on Himalayas