Specialist

Role Overview

We are seeking a Cybersecurity Risk Specialist to support our first-party and third-party cybersecurity risk management programs. You will help identify, assess, monitor, report on, and mitigate cybersecurity risks while supporting governance integration and strategic planning.

Key Responsibilities

• Support the identification, assessment, and monitoring of inherent and residual cybersecurity risks (first and third party), recommend mitigation strategies, assist with monitoring mitigation activities, and support risk escalation and acceptance processes.
• Maintain cybersecurity risk registers to ensure risks are appropriately identified, documented, updated, tracked, and escalated. Identify emerging threats, trends, and systemic risks impacting organizational objectives.
• Support enterprise risk management integration and reporting by monitoring Key Risk Indicators (KRIs), KPIs, and maturity metrics; prepare governance materials, executive dashboards, scorecards, and reports for senior leadership.
• Collaborate with cross-functional teams including Cybersecurity Governance, IT, Legal, Privacy, and business stakeholders regarding cybersecurity requirements and contractual obligations.
• Identify opportunities to improve risk management programs and support annual planning and maturity assessments.