IT and Cybersecurity Risk Manager
Core
Provide independent 2nd line oversight of IT and cybersecurity risk frameworks, controls, and third-party arrangements for a financial services firm.
Role type
Senior IC IT and Cybersecurity Risk Manager
Builds
Independent risk opinions, quarterly risk reports, and regulatory responses
Domain
Financial services / Cybersecurity / IT Risk Governance
Deliverable
dashboards & analysis
Required skills
Cybersecurity risk management, Third-party risk management, IT audit, Regulatory compliance, Cloud security (Azure/AWS/GCP), Identity and access management, GRC platforms, Incident management, Change risk oversight
Preferred skills
People leadership, Financial services experience (insurance/banking), Big 4 advisory experience
Technologies
ServiceNow IRM, Archer, MetricStream, Azure, AWS, GCP
Responsibilities
Review and challenge 1st line risk and control self-assessments (RCSAs), Oversee cyber incident management and regulatory reporting, Assess third-party and cloud technology risk arrangements, Provide independent risk oversight of material technology programmes, Produce quarterly Cyber and IT Risk Reports for Executive committees, Interpret new regulations and assess organizational gap positions
Seniority
Senior, hands-on IC with oversight responsibilities
