Segment Risk Manager - Cybersecurity
Core
Oversees operational and regulatory risk strategy programs for a business segment, focusing on Identity and Access Management (IAM) and cybersecurity controls.
Role type
Senior IC segment risk manager (cybersecurity)
Builds
Risk strategy programs, control frameworks, and executive risk reports
Domain
Financial services + Cybersecurity (IAM, Identity Governance, Access Management)
Required skills
Risk identification and assessment, control evaluation and escalation, governance lifecycle management, regulatory compliance, executive reporting, strategic advisory, issue management, quantitative/qualitative risk analysis
Preferred skills
IAM process support, threat modeling, cloud platform expertise (AWS/Azure/GCP), DevOps and containerization, cybersecurity policy governance
Technologies
AWS, Azure, GCP, Identity Governance, SSO/Federation, Privileged Access Management, DevOps pipelines, Containers, APIs
Responsibilities
Evaluate effectiveness of controls and escalate gaps, lead risk identification and assessment for IAM, manage governance of issues from ideation to closure, execute risk assessments against defined scopes, support RCSA and Exception Management processes, provide advisory on control design and cybersecurity standards, support executive reporting on risk portfolio, act as trusted advisor on new challenges, deliver timely escalation to senior management, collaborate with audit and corporate risk, monitor credit risk for the segment
Seniority
Senior, hands-on IC