Manager, Cyber Risk & Analysis
Core
Align global regulatory expectations with implemented security controls to support mergers and acquisitions, acting as a trusted advisor on cyber risk posture.
Role type
Manager, Cyber Risk & Analysis (GRC)
Builds
Enterprise-wide information security control framework and compliance programs for a major financial institution.
Domain
Financial Services / Cybersecurity Governance, Risk, and Compliance
Deliverable
client delivery
Required skills
Cybersecurity risk assessment, regulatory compliance analysis, stakeholder influence, technical solution evaluation, risk reporting, framework application (NIST, ISO)
Preferred skills
Experience at major tech/financial firms (Visa, Mastercard, Amex), drafting executive risk reports, hands-on framework application (NIST CSF, 800-53, ISO 27001)
Technologies
NIST CSF, NIST 800-53, ISO 27001, PCI DSS, CSF, FFIEC guidance
Responsibilities
Maintain and advance the company's information security control framework; Partner with cross-functional teams to build and monitor compliance; Oversee GRC initiatives for regulations like ENS, Lince, CRA Cybersecurity Resiliency Act, and EU AI Act; Represent the team in technology councils to apply a risk lens; Build relationships with technical leaders to evaluate implementation plans and communicate risks; Assess technology inventory and regulatory applicability against business processes.
Seniority
Manager, strategic alignment & program leadership
