Risk Manager

📋 Description

• Run and continuously improve the information security risk management lifecycle, including risk
• Run enterprise, business-unit, project, technology, and third-party risk assessments, ensuring
• Maintain risk registers, risk statements, treatment plans, action owners, due dates, and escalation
• Define and monitor risk appetite, tolerance indicators, key risk indicators, and management
• Advise senior leaders and control owners on risk acceptance, mitigation options, compensating
• Partner with control owners and business stakeholders to improve control design, evidence quality

🎯 Requirements

• Demonstrable experience leading information security risk assessments and treatment programmes in a
• Experience with and understanding of recognised compliance frameworks and standards such as ISO
• Strong understanding of security and technology risks across systems, networks, applications, cloud
• Experience working with cloud environments such as AWS, GCP, or Azure and the ability to translate
• Experience with risk registers, risk acceptance, exception management, remediation tracking
• Experience working with internal and external auditors, control owners, executive stakeholders, and

🎁 Benefits

• Generous PTO & Holiday Schedule
• Parental Leave
• Progressive Healthcare Options
• Retirement Programs
• Opportunity for Education Reimbursement
• Commuter Offset (Specific locations)