Technical Risk Manager - Sr. Security Engineer I
Core
Own the Security Risk Management program end-to-end, including risk identification, analysis, quantification, and mitigation strategy, while overseeing the Third-Party Risk Management (TPRM) function.
Role type
Senior Security Risk Manager / GRC Engineer
Builds
Enterprise risk register, risk mitigation strategies, and vendor risk oversight programs
Domain
Cybersecurity, GRC, Third-Party Risk Management
Deliverable
dashboards & analysis
Required skills
Security risk management, risk quantification (FAIR/OCTAVE), Third-Party Risk Management (TPRM), cloud architecture understanding, risk register management, executive communication
Preferred skills
GRC tooling (Vanta, Drata, OneTrust, Archer, ServiceNow), SOC 2/ISO 27001/FedRAMP experience, board-level presentation
Technologies
Vanta, Drata, OneTrust, Archer, ServiceNow GRC
Responsibilities
Maintain the enterprise risk register and drive it as a decision-useful tool; lead risk analysis for new initiatives and architecture changes; develop and track risk mitigation strategies; oversee vendor risk tiering, assessment, and monitoring; build and present risk reporting and KPIs/KRIs to leadership; partner with engineering and GRC teams to integrate audit and pen test findings.
Seniority
Senior, hands-on IC
