Job description

Position Summary

Support the establishment, execution and maintenance of a cybersecurity risk management framework and process. Responsible for completing cyber risk assessments and partnering with higher impact/complexity assigned business areas to set Risk Tolerances in line with security requirements. Demonstrate the company's core values of respect, honesty, integrity, diversity, inclusion and safety.

Essential Job Functions

• Support in the establishment, execution and maintenance of a cybersecurity risk management framework and process

• Complete cyber risk assessments with higher impact/complexity assigned business areas to identify risks and evaluate potential impacts to the business

• Work with the business and BISO (Business Information Security Officer) to establish formal risk owners for cyber-related risks

• Support the business and BISO to set Risk Tolerances and develop a risk rating matrix to identify which risks need to be escalated to leadership for review and acceptance

• Partner with the business, IT and cybersecurity leadership to determine fit-for-purpose cybersecurity OKRs and business OKRs in line with the cybersecurity and business strategy; provide input to establish targets for these OKRs

• Monitor and report on assigned business area's compliance with security policies and enterprise-wide enforcement of policies

• Partner with assigned business areas and BISOs, as needed, to help manage and mitigate risks outside of risk tolerance levels

• Provide inputs to Reporting Analyst on opportunities to improve reporting and analytics to reflect maturity in risk management methodology

• Document and maintain identified risks within GRC system throughout the risk lifecycle (i.e., identified and resolved)

• Partner with cybersecurity team to establish and facilitate cybersecurity governance forums

• Must be able to perform the essential job functions of this position with or without reasonable accommodation

Minimum Position Qualifications

• Bachelor's Degree in cybersecurity, computer science, information technology, or information security

• 5+ years of cybersecurity experience or related IT field, preferably in cyber risk management

• Any experience with NIST or ISO cybersecurity risk management frameworks

• Any experience with compliance and regulation frameworks, as relevant (e.g., PCI, HIPAA)

• Strong interpersonal skills to communicate effectively with team members and leadership

Experience/Education

• Cybersecurity certifications with demonstrated application of learned concepts: (ISC)2 CAP (Certified Authorization Professional) or (ISC)2 SCCP (Systems Security Certified Practitioner) or ISACA CRISC (Certified in Risk and Information Systems Control

Job Type: Full-time

Pay: $55,760.19 - $137,938.82 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee discount
• Flexible spending account
• Health insurance
• Paid time off
• Tuition reimbursement
• Vision insurance

Schedule:

• Monday to Friday

Supplemental pay types:

• Bonus pay
• Signing bonus

Experience:

• Cybersecurity: 5 years (Preferred)
• NIST standards: 5 years (Preferred)
• Risk management: 5 years (Preferred)
• PCI: 5 years (Preferred)
• HIPPA: 5 years (Preferred)

License/Certification:

• Certified Authorization Professional (Preferred)
• SSCP (Preferred)
• ISACA CRISC (Preferred)

Work Location: Remote

www.arclintfl.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, www.arclintfl.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, www.arclintfl.com is the ideal place to find your next job.