Risk Manager
Core
Lead the identification, assessment, treatment, monitoring, and reporting of information security and business risks across the organization.
Role type
Senior IC Risk Manager (Information Security & Business Risk)
Builds
Enterprise risk management programs, risk registers, control environments, and audit readiness for a global identity platform.
Domain
Cybersecurity, Identity & Access Management, Enterprise Risk Management (ERM), Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Information security risk assessment, compliance frameworks (ISO 27001, SOC 2, NIST, HIPAA), cloud risk (AWS/GCP/Azure), third-party risk management, risk register maintenance, stakeholder engagement, audit coordination, metrics and reporting, control design validation
Preferred skills
Enterprise risk reporting, customer assurance programs, GRC platform automation, SaaS/cloud environment experience, relevant certifications (CISSP, CISM, CISA, CRISC)
Technologies
ISO 27001, SOC 2, NIST, HIPAA, AWS, GCP, Azure, GRC platforms
Responsibilities
Run the information security risk management lifecycle; conduct enterprise and project risk assessments; maintain risk registers and treatment plans; define and monitor risk appetite and KPIs; advise leaders on risk acceptance and mitigation; partner with control owners to improve control design; coordinate with internal and external auditors; oversee third-party and supplier risk activities; establish governance routines and workflows; track remediation commitments and report on residual exposure.
Seniority
Senior, hands-on IC
