Cyber Security Risk Governance Senior Associate
HybridTexas, United States
Job Summary
Execute maintenance and alignment of cyber risk governance frameworks to enterprise and industry models, including documenting governance processes for risk oversight, aggregation, and reporting. Map policies to control standards, cyber risks, and KRIs to ensure traceability across governance, reporting, and risk treatment activities. Assist in developing, maintaining, and refreshing Cyber Security Risk Appetite materials, while supporting metric updates, documentation, and review coordination. Maintain cyber risk taxonomy, top risks, and enterprise risk classification documentation, including support for updates, change tracking, and version control. Coordinate credible challenge activities for top cyber risks by organizing stakeholder feedback, documenting outcomes, and tracking follow-up actions. Prepare and maintain governance committee reporting templates, recurring materials, and status updates to support consistent and comparable cyber risk reporting. Partner across the Cyber Security Risk Office and first-line teams to support integrated governance, treatment, risk analytics, and reporting activities, ensuring alignment to applicable regulatory and industry cyber risk management expectations.
Required Qualifications
- Bachelor's degree preferred or equivalent experience
- Minimum of 6 years of related experience in cybersecurity risk management, technology risk, remediation tracking, or GRC program operations
- Strong organizational, analytical, and documentation skills with high attention to detail
Desired Qualifications
- Experience supporting risk exceptions, policy deviations, or remediation oversight in a regulated environment preferred
- Experience with GRC tools, data visualization tools, data warehouse (e.g., Power BI, Snowflake, Archer, SmartSuite, ServiceNow)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.