Manager, Technology & Cybersecurity Risk / Risk Data Analyst

Genworth is hiring a Technology & Cybersecurity Risk leader in Richmond, VA (hybrid) to strengthen how the organization identifies, assesses, monitors, and reports enterprise risk. You will modernize risk management through Power BI dashboards, Power Automate workflows, and AI-enabled approaches, helping teams turn risk data into actionable insights. The role also includes executive-ready storytelling and risk challenge to improve controls across technology, cybersecurity, and third-party environments.

Hybrid schedule: In-office days are Tuesday, Wednesday, and Thursday, with working hours targeting 9am–5pm EST. This position is available to Virginia residents with Richmond, Virginia in-office applicants.

What you’ll do

• Lead and execute enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments.
• Identify, evaluate, and prioritize risks related to availability, security, resilience, and data integrity.
• Maintain and manage the technology risk register, including risk identification, scoring, and remediation tracking.
• Evaluate and challenge IT general controls (ITGCs) and application controls, ensuring design and effectiveness.
• Align risk and control practices to industry standards such as NIST, ISO 27001, COBIT, SOC 2, and CIS Controls.
• Partner with Technology and Security teams to drive control improvements and remediation of identified risks.
• Support definition of risk appetite and tolerance, including development and monitoring of key risk indicators (KRIs).
• Provide independent oversight and challenge to ensure risks are identified and managed within technology initiatives, projects, and change efforts.
• Support regulatory, audit, and compliance activities by providing documentation, evidence, and subject matter expertise.
• Monitor emerging technology and cybersecurity risks (for example, cloud, AI, cyber threats) and translate them into actionable mitigation strategies.
• Conduct cybersecurity risk assessments for enterprise environments across on-prem, cloud, and hybrid.
• Assess cybersecurity controls across IAM, data protection and encryption, network and endpoint security, and incident response capabilities.
• Oversee vulnerability management activities, including penetration testing and remediation tracking.
• Support cyber incident readiness activities such as tabletop exercises and post-incident reviews.
• Develop cybersecurity KRIs and deliver executive reporting, including clear PowerPoint narratives.
• Collect, validate, and analyze risk data from multiple sources, including GRC tools, security platforms, and vendor systems.
• Build and maintain Power BI dashboards for risk registers, KRIs, vendor risk metrics, and trend analysis.
• Design and implement Power Automate workflows to streamline risk processes such as assessments, approvals, and reporting.
• Use AI and Generative AI tools to enhance reporting, summarization, and analysis, and support responsible AI use by identifying and mitigating risks such as data privacy, bias, and accuracy.

What you bring

• 5+ years of experience in one or more of: Technology / Cyber Risk, Risk Management / GRC, or Risk Data Analytics.
• Experience conducting risk assessments and managing remediation activities.
• Familiarity with risk and control frameworks such as NIST, ISO, and SOC.
• Strong Power BI skills, including dashboarding and data modeling.
• Advanced Microsoft Excel skills for analytics and data manipulation.
• Advanced PowerPoint skills for executive presentations.
• Experience building dashboards, reports, and risk analytics, and translating data into actionable insights.
• Experience using Power Automate or similar workflow automation tools.
• Familiarity with AI / Generative AI tools to improve productivity and analysis.
• Experience leveraging APIs to access, share, and aggregate data.
• Strong written and verbal communication skills, including executive-level storytelling.
• Ability to translate technical concepts into business-friendly language.
• Bachelor’s degree in a related field such as Information Technology, Cybersecurity, Computer Science, Business, Risk Management, Finance, or a related field.

Tools and frameworks you’ll work with

• Power BI, Power Automate, PowerPoint
• AI-enabled solutions, AI and Generative AI tools
• NIST, ISO 27001, COBIT, SOC 2, CIS Controls
• NIST CSF, NIST 800-53, ISO 27002
• GRC tools (including ServiceNow GRC, Archer, OneTrust)
• AWS, Azure, GCP
• SQL, Python, PowerShell

Compensation and incentives

• Salary range: $109,000 – $169,000 per year (national range)
• Eligible for a bonus incentive plan in addition to base salary; incentive compensation is based on individual and company performance and is not guaranteed.

Benefits at Genworth

• Comprehensive Healthcare Coverage
• Multiple 401(k) Savings Plan Options
• Auto Enrollment in employer-directed retirement account feature (100% employer-funded)
• Generous Paid Time Off including 12 Paid Holidays, Volunteer Time Off, and Paid Family Leave
• Disability, Life, and Long Term Care Insurance
• Tuition Reimbursement, Student Loan Repayment, and Training & Certification Support
• Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
• Caregiver and Mental Health Support Services
• Competitive Compensation & Total Rewards Incentives

Nice to have

• Professional certifications such as CISA, CRISC, CISM, CISSP, CTPRP, or PMP
• Master’s degree (MBA, MS Cybersecurity, or related field)
• Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust)
• Knowledge of cloud platforms (AWS, Azure, GCP)
• Experience with scripting or data tools (SQL, Python, PowerShell)
• Experience presenting to senior leadership or risk committees

Additional details

This role is not eligible for employment visa sponsorship.