Cyber Risk Management Lead

4 weeks ago


New York, United States Pierce Technology Corp Full time
Job DescriptionJob Description
  • Assume management of the security risk management process.
  • Lead a team focused on collaborating and helping business units identify their security related risks.
  • Ensure alignment of security policy, standards, and controls with the enterprise security risk management framework to produce scalability and flexibility.
  • Working across the security teams, and collaboratively with business lines and functions to assess security related business impacting risks and their prioritization.
  • Educate on and evangelize the cybersecurity risk management framework, allowing risk owners to execute on their commitments as owners.
  • Identify risk owners, empower them with data for decision making, to help the execution of risk action plans, and all open and pending risks.
  • Document and champion methods of using risk for prioritization, assisting teams in leveraging risk in their own planning methodologies.
  • Partner closely with other teams managing elements of risk across Ascot, including our Privacy teams.
  • Measure cybersecurity risk, identifying and tracking key risk indicators, and publish as part of metrics dashboards.
  • Fully integrate cybersecurity into third party risk management, ensuring requirements are met by all types of our vendors and suppliers.
  • Drive a culture of continuous risk management, where cybersecurity risk is both constantly measured and also baked into decision making frameworks.
  • Integrate threat intelligence into risk management, ensuring our priorities are based on real world threats.
  • Lead the cybersecurity metrics program, building ways to communicate state of cybersecurity to all stakeholders, include the board of directors.

Requirements

  • Minimum of 8+ years of experience in Cyber/IT Risk management.
  • Property & Casualty insurance industry experience preferred.
  • CRISC or equivalent certification required.
  • Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and nontechnical audiences at various hierarchical levels, ranging from senior leadership to technical specialists.
  • Knowledge of current and upcoming methodologies and trends in the cybersecurity landscape.
  • Project management skills to assist with the development and execution of strategic security roadmaps to strengthen and continuously improve information security of the business.
  • Knowledge and understanding of the design and deployment of security capabilities in operational and manufacturing environments.
  • Familiarity with existing and experimental cybersecurity philosophies and experience implementing leading edge capabilities.
  • Excellent leadership skills to direct the information security team and collaborate with other business teams.
  • Knowledge and experience with industry cyber security frameworks, such as NIST CSF, CIS, ISO27001
  • Regulatory compliance knowledge, including Lloyd’s cyber principles, PRA/FCA, NYS DFS Part 500, BMA Cyber Code of Conduct, GDPR and CCPA.


  • New York, United States Pierce Full time

    Assume management of the security risk management processLead a team focused on collaborating and helping business units identify their security related risksEnsure alignment of security policy, standards, and controls with the enterprise security risk management framework to produce scalability and flexibilityWorking across the security teams, and...


  • New York, United States Pierce Technology Corp Full time

    Job DescriptionJob DescriptionAssume management of the security risk management process.Lead a team focused on collaborating and helping business units identify their security related risks.Ensure alignment of security policy, standards, and controls with the enterprise security risk management framework to produce scalability and flexibility.Working across...


  • New York County, New York, United States Pierce Technology Corp Full time

    Assume management of the security risk management process. Lead a team focused on collaborating and helping business units identify their security related risks. Ensure alignment of security policy, standards, and controls with the enterprise security risk management framework to produce scalability and flexibility. Working across the security teams,...

  • Governance, Risk

    7 days ago


    New York, United States Millennium Management Corp Full time

    Governance, Risk & Compliance Lead Securing Millennium's complex and robust technical environment from external and internal threats is a top priority. This individual will be responsible for development and management of the Firm's Information Security Governance structure that will include alignment to industry standard risk and control frameworks and the...


  • New York, New York, United States Marsh McLennan Full time

    Cyber Risk Analytics Co-Op – Global Strategic AdvisoryProgram Dates: July - December 2023Time Commitment: 40 hours per week Guy Carpenter LLC Global Strategic Advisory is seeking talented and motivated individuals to join our Cyber Risk Analytics Co-Op Program.What can you expect?You will join a team Cyber Analytics expert that deploy deeply specialized...


  • West New York, United States UBS Full time

    Your role Do you thrive in a fast paced, dynamic environment that helps protect firm and client data? Are you someone who can make the right call in challenging situations? Are you a shrewd evaluator of the risks in cyber and data protection? Can you navigate the big picture and dive into the detail when required? We are looking for a Cyber and Information...


  • New Haven, United States Connecticut Interlocal Risk Management Agency (cirma) Full time

    Is your ordinary extraordinary? Then you belong at CIRMA. CIRMA is a leading expert in reducing municipal insurance exposures thanks in part to our team of experienced risk management professionals. If you are a problem-solving enthusiast and are seeking a rewarding opportunity to make Connecticut commu8nicities and schools a better place to work, live and...


  • New Haven, United States Connecticut Interlocal Risk Management Agency (CIRMA) Full time

    Is your ordinary extraordinary? Then you belong at CIRMA. CIRMA is a leading expert in reducing municipal insurance exposures thanks in part to our team of experienced risk management professionals. If you are a problem-solving enthusiast and are seeking a rewarding opportunity to make Connecticut commu8nicities and schools a better place to work, live and...


  • New Haven, United States Connecticut Interlocal Risk Management Agency (CIRMA) Full time

    Is your ordinary extraordinary? Then you belong at CIRMA. CIRMA is a leading expert in reducing municipal insurance exposures thanks in part to our team of experienced risk management professionals. If you are a problem-solving enthusiast and are seeking a rewarding opportunity to make Connecticut commu8nicities and schools a better place to work, live and...


  • New York, United States TSG Risk Full time

    Overview: **Responsibilities**: - Implement and maintain security measures to protect computer systems, networks, and data - Conduct regular vulnerability assessments and penetration testing - Monitor network traffic for suspicious activity and respond to security incidents - Develop and implement security policies and procedures - Stay up-to-date with the...


  • New York, United States Citi Full time

    Citi, the leading global bank, has approximately 200 million customer accounts and does business in more than 160 countries and jurisdictions. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities...


  • New York, United States eJAmerica Full time

    Job DescriptionJob DescriptionRole- Cyber Security/Risk Operational SpecialistMinimum 4+ Years of IT ExperienceMust Have Skills4+ Years of Cybersecurity/Risk Analyst with information risk assessment, data privacy impact assessment.2+ Years of experience in Resource Access Control Facility (RACF)2+ Years of experience in using ServiceNow GRC tool.2+ Years of...


  • New Orleans, Louisiana, United States Connecticut Interlocal Risk Management Agency (CIRMA) Full time

    We are looking for a Senior Risk Management Consultant to apply your knowledge and skills in a collaborative work environment in cross-functional teams, contributing to the ongoing success of our members and organization.As a CIRMA Senior Risk Management Consultant, you will have the opportunity to utilize an enterprise risk management approach in helping...


  • New York, United States Stripe Full time

    Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world's largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount...


  • New York, United States Millennium Management Corp Full time

    Fundamental Equities Risk Manager As a member of our Equity Risk Management team, you will work closely with the leader of the group to establish and monitor trading parameters, risk guidelines, and performance metrics for Portfolio Managers. Over time, you will partner daily with our Portfolio Managers to conduct onboarding interviews and ongoing risk...

  • Team Lead

    3 hours ago


    New York, United States Apex Systems Full time

    Our client is currently seeking an experienced Blue Team Lead to become part of the Department of State (DoS) Diplomatic Security Cyber Mission (DSCM) program providing leading cyber and technology security experience to enable innovative, effective and secure business processes. Location: Rosslyn, VA . Hybrid schedule/role. Role and Responsibilities: Blue...


  • New York, United States Top Stack Full time

    Our client, a growing financial services organization, is hiring a Governance and Risk Security Manager for the fully remote full-time role. Areas of focus: Manage the development and implementation of a comprehensive GRC strategy aligned with industry best practices and tailored to the specific needs internally. Establish and document policies, procedures,...

  • Risk Management

    1 week ago


    New York, United States JPMorgan Chase & Co. Full time

    As a Risk Management - Market Risk Coverage Lead - Vice President, you will participate in all risk related matters (including monitoring and forecasting). Working in Risk Management will give the successful candidate an opportunity to work alongside professionals across all levels and regions with commensurate exposure to senior portfolio managers in an...


  • New York, United States Top Stack Full time

    Our client, a growing financial services organization, is hiring a Governance and Risk Security Manager for the fully remote full-time role.Areas of focus:Manage the development and implementation of a comprehensive GRC strategy aligned with industry best practices and tailored to the specific needs internally.Establish and document policies, procedures, and...


  • New York, United States Top Stack Full time

    Our client, a growing financial services organization, is hiring a Governance and Risk Security Manager for the fully remote full-time role.Areas of focus:Manage the development and implementation of a comprehensive GRC strategy aligned with industry best practices and tailored to the specific needs internally.Establish and document policies, procedures, and...