Cyber Risk Management Lead

Key Responsibilities

• Lead the Cyber Risk Management domain through cross-functional and matrix-based collaboration, without direct people management responsibilities.
• Provide professional guidance and subject matter expertise to cybersecurity risk specialists and stakeholders across the organization.
• Drive the organization's cyber risk management strategy, framework, and methodology.
• Lead cross-functional cyber risk initiatives, ensuring alignment between business, technology, and cybersecurity stakeholders.

Requirements

• At least 5 years of experience experience in leading cross-functional cybersecurity initiatives and providing professional guidance in a matrix organizational structure.

• Strong ability to influence stakeholders, drive collaboration, and lead complex processes without direct managerial authority.

• Demonstrated ability to coordinate cybersecurity experts and multidisciplinary teams across the organization.

• In-depth understanding of cybersecurity architecture, application security, infrastructure, cloud security, and identity management.

• Experience reviewing technology architectures and analyzing security risks in complex systems.

• Strong knowledge of leading risk management frameworks and standards, including NIST, ISO 27001, and FAIR.

• Experience leading risk monitoring and control processes, including tracking remediation plans and information security findings.

• Proven ability to present risk assessments, risk exposure, and actionable insights to senior management.

• Strong ability to lead cross-functional initiatives and influence stakeholders without direct authority.

• Experience working with regulatory bodies and internal and external auditors.

Advantages

• Familiarity with Threat Modeling methodologies and technical risk analysis.
• Knowledge of cloud environments (AWS, Azure, GCP) and modern technology architectures.
• Professional certifications such as CISSP, CISM, or CRISC.