Identify areas of cyber risk to provide oversight, analysis, effective challenge, and risk-informed recommendations for enhancement
Provide technical assessments of cybersecurity and controls design and effectiveness
Draft assessments for senior management and other stakeholders, to include regulatory agencies and the Board of Directors
Stay current on emerging cyber threats and potential implications to the firm
Collaborate effectively with colleagues, stakeholders, and leaders across multiple organizations to achieve objectives

Bachelor’s degree or military experience
At least 5 years of experience in cybersecurity or enterprise data management
At least 3 years of hands-on experience with data protection technologies such as encryption, tokenization, labeling or cryptography
At least 2 years of experience in audit, risk management, program management or technology leadership
Professional cyber certifications (CISSP, CISM, or CRISC) preferred
Familiarity with NIST Cybersecurity Framework controls, NIST 800-53, ISO 27000-1

Senior Risk Manager, Data Protection

Key skills