Security Risk Management

Security Risk Management Data Jobs

2 jobs found

1d ago

Manager, Technology & Cybersecurity Risk / Risk Data Analyst

Genworth Richmond, VA

Richmond, VA

1d ago

$109k - $169k/yr Full time Manager Analytics Artificial Intelligence

Apply Now

Job Description

Genworth is hiring a Technology & Cybersecurity Risk leader in Richmond, VA (hybrid) to strengthen how the organization identifies, assesses, monitors, and reports enterprise risk. You will modernize risk management through Power BI dashboards, Power Automate workflows, and AI-enabled approaches, helping teams turn risk data into actionable insights. The role also includes executive-ready storytelling and risk challenge to improve controls across technology, cybersecurity, and third-party environments.

Hybrid schedule: In-office days are Tuesday, Wednesday, and Thursday, with working hours targeting 9am–5pm EST. This position is available to Virginia residents with Richmond, Virginia in-office applicants.

What you’ll do

Lead and execute enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments.
Identify, evaluate, and prioritize risks related to availability, security, resilience, and data integrity.
Maintain and manage the technology risk register, including risk identification, scoring, and remediation tracking.
Evaluate and challenge IT general controls (ITGCs) and application controls, ensuring design and effectiveness.
Align risk and control practices to industry standards such as NIST, ISO 27001, COBIT, SOC 2, and CIS Controls.
Partner with Technology and Security teams to drive control improvements and remediation of identified risks.
Support definition of risk appetite and tolerance, including development and monitoring of key risk indicators (KRIs).
Provide independent oversight and challenge to ensure risks are identified and managed within technology initiatives, projects, and change efforts.
Support regulatory, audit, and compliance activities by providing documentation, evidence, and subject matter expertise.
Monitor emerging technology and cybersecurity risks (for example, cloud, AI, cyber threats) and translate them into actionable mitigation strategies.
Conduct cybersecurity risk assessments for enterprise environments across on-prem, cloud, and hybrid.
Assess cybersecurity controls across IAM, data protection and encryption, network and endpoint security, and incident response capabilities.
Oversee vulnerability management activities, including penetration testing and remediation tracking.
Support cyber incident readiness activities such as tabletop exercises and post-incident reviews.
Develop cybersecurity KRIs and deliver executive reporting, including clear PowerPoint narratives.
Collect, validate, and analyze risk data from multiple sources, including GRC tools, security platforms, and vendor systems.
Build and maintain Power BI dashboards for risk registers, KRIs, vendor risk metrics, and trend analysis.
Design and implement Power Automate workflows to streamline risk processes such as assessments, approvals, and reporting.
Use AI and Generative AI tools to enhance reporting, summarization, and analysis, and support responsible AI use by identifying and mitigating risks such as data privacy, bias, and accuracy.

What you bring

5+ years of experience in one or more of: Technology / Cyber Risk, Risk Management / GRC, or Risk Data Analytics.
Experience conducting risk assessments and managing remediation activities.
Familiarity with risk and control frameworks such as NIST, ISO, and SOC.
Strong Power BI skills, including dashboarding and data modeling.
Advanced Microsoft Excel skills for analytics and data manipulation.
Advanced PowerPoint skills for executive presentations.
Experience building dashboards, reports, and risk analytics, and translating data into actionable insights.
Experience using Power Automate or similar workflow automation tools.
Familiarity with AI / Generative AI tools to improve productivity and analysis.
Experience leveraging APIs to access, share, and aggregate data.
Strong written and verbal communication skills, including executive-level storytelling.
Ability to translate technical concepts into business-friendly language.
Bachelor’s degree in a related field such as Information Technology, Cybersecurity, Computer Science, Business, Risk Management, Finance, or a related field.

Tools and frameworks you’ll work with

Power BI, Power Automate, PowerPoint
AI-enabled solutions, AI and Generative AI tools
NIST, ISO 27001, COBIT, SOC 2, CIS Controls
NIST CSF, NIST 800-53, ISO 27002
GRC tools (including ServiceNow GRC, Archer, OneTrust)
AWS, Azure, GCP
SQL, Python, PowerShell

Compensation and incentives

Salary range: $109,000 – $169,000 per year (national range)
Eligible for a bonus incentive plan in addition to base salary; incentive compensation is based on individual and company performance and is not guaranteed.

Benefits at Genworth

Comprehensive Healthcare Coverage
Multiple 401(k) Savings Plan Options
Auto Enrollment in employer-directed retirement account feature (100% employer-funded)
Generous Paid Time Off including 12 Paid Holidays, Volunteer Time Off, and Paid Family Leave
Disability, Life, and Long Term Care Insurance
Tuition Reimbursement, Student Loan Repayment, and Training & Certification Support
Wellness support including gym membership reimbursement and Employee Assistance Program resources (work/life support, financial & legal management)
Caregiver and Mental Health Support Services
Competitive Compensation & Total Rewards Incentives

Nice to have

Professional certifications such as CISA, CRISC, CISM, CISSP, CTPRP, or PMP
Master’s degree (MBA, MS Cybersecurity, or related field)
Experience with GRC platforms (e.g., Archer, ServiceNow GRC, OneTrust)
Knowledge of cloud platforms (AWS, Azure, GCP)
Experience with scripting or data tools (SQL, Python, PowerShell)
Experience presenting to senior leadership or risk committees

Additional details

This role is not eligible for employment visa sponsorship.

View full job page →

4d ago

Risk Information Technology and Data Analyst

Regions Atlanta, GA

Atlanta, GA

4d ago

$99k - $133k/yr Full time Cybersecurity Risk & Compliance Data Data Analysis

Apply Now

Job Description

Regions is hiring a Risk Information Technology and Data Analyst to support IT and Data risk management activities aligned to regulatory expectations and internal policies.

Responsibilities

Lead IT and Data Targeted Risk Assessments, Continuous Monitoring, and Testing across Information Technology and Data, including application development, cyber security, enterprise architecture, business continuity and disaster recovery, data governance, data quality, and change management
Conduct core risk assessments, including enterprise risk assessment, payment network attestations, and cyber security risk assessment focused on alignment with key regulatory requirements
Perform gap assessments to evaluate the design and effectiveness of technology and data controls against regulatory and industry requirements
Review and validate risk analysis work completed by junior team members
Create and maintain IT and Data Risk Management methodology and related procedures
Monitor trends and regulatory changes in IT and Data and advise leadership on technology and data initiatives supporting those trends
Review IT and Data policies and standards to ensure alignment with regulations and industry best practices
Monitor, track, validate, and report progress toward mitigation and resolution of IT and Data risk issues
Develop and produce reporting to communicate key risks, findings, and improvement recommendations; participate in discussions with key stakeholders
Support annual planning, including staffing assessments and identifying training opportunities
Support regulatory and audit exam readiness by providing risk insights, collecting evidence, and preparing verbal and written materials
Build and maintain partnerships with key stakeholders across strategic business groups and technology to provide credible challenge on Technology and Data execution of the risk management framework
Provide day-to-day guidance and mentoring to junior analysts and help build risk awareness across technology, data, and business functions

Requirements

Bachelor’s degree in a related field
5 years of relevant experience in IT risk, IT audit, technology, cybersecurity, or operational risk
Strong understanding of risk management, cybersecurity/technology, and compliance principles

Technologies / Tools

FFIEC
NIST
GLBA
Archer
ServiceNow
Microsoft Products (Excel, PowerPoint, Power BI, Teams, Visio, SharePoint)
HIPAA

Benefits

Paid Vacation/Sick Time
401K with Company Match
Medical, Dental and Vision Benefits
Disability Benefits
Health Savings Account
Flexible Spending Account
Life Insurance
Parental Leave
Employee Assistance Program
Associate Volunteer Program

Preferences

Certifications such as CISA, CISSP, CRISC, or CPA
Experience in a financial institution or public accounting
Experience with GRC tools (for example, Archer, ServiceNow)
Strong understanding of key banking regulations and industry standards (for example, FFIEC, GLBA, NIST)
Strong analytical and communication skills with the ability to translate technical risks for business audiences
Experience in operational risk management, compliance, or related risk disciplines
Ability to balance business needs, technology considerations, and risk management principles
Experience with data privacy, information protection, HIPAA, or related regulatory requirements (plus), though not required
Strong organizational, prioritization, and time management skills; ability to manage multiple responsibilities with minimal oversight in a fast-paced environment
Strong communication, critical thinking, and problem-solving skills to influence outcomes and support sound risk-based decision making
Aptitude and willingness to learn and apply the organization’s risk assessment methodologies and processes

Skills and Competencies

Ability to adapt to quickly changing environments
Ability to build effective partnerships
Ability to mentor and guide less experienced team members
Ability to research, analyze data, and derive facts
Ability to work under pressure and meet deadlines
Proficiency with Microsoft Products (Excel, PowerPoint, Power BI, Teams, Visio, SharePoint) and ability to learn additional systems as needed
Strong critical thinking and problem-solving skills
Strong verbal, written communication, and organizational skills
Strong work ethic and self-motivation

Position Details

Position Type: Full time
Work Location: Onsite in Atlanta, GA

Compensation

Base Salary Range: USD 99,222 - 132,650 per year
Pay ranges are job specific and provided as a point-of-market reference for compensation decisions
Pay may be influenced by experience, skills, knowledge, contribution, job location, and performance
Job Range Target: Minimum $99,222.20; Median $132,650.00
Incentive: This job may participate in an annual discretionary bonus plan

Job Application

Applications are accepted electronically through the Regions career site for a minimum of five business days from the date of posting

View full job page →

Security Risk Management Data Jobs

Manager, Technology & Cybersecurity Risk / Risk Data Analyst

Risk Information Technology and Data Analyst

Get Security Risk Management Data Jobs alerts