Sr. Specialist, Cybersecurity & Risk Program

Job Summary

The Senior Program Management Expert plays a crucial role in executing the company’s risk and cyber security initiatives and maintaining the overall program. This role ensures the effective management of risk and cyber security strategy implementation, and portfolio oversight, providing comprehensive reporting to support the company’s risk and cyber security objectives and regulatory compliance.

• Manage and coordinate sourcing activities for risk and cyber security tools, solutions, and services to ensure alignment with the company’s requirements.
• Oversee budget planning and tracking for risk and cyber security initiatives, for the goal of optimizing resource allocation and cost control.
• Track and manage the risk and cybersecurity maturity program, continuously identifying areas for improvement and proposing strategic initiatives.
• Coordinate the implementation of risk and cyber security initiatives across all organizational units with the goal of achieving seamless system integration and architecture alignment.
• Develop, maintain, and deliver comprehensive reports and dashboards to leadership to support decision-making and demonstrate value realization.
• Lead cross-functional teams to execute risk and cyber security projects from initiation to closure, ensuring alignment with strategic business objectives.
• Create and maintain project documentation, including project plans, schedules, risk registers, and status reports.
• Facilitate regular meetings with key internal and external stakeholders to provide updates, address challenges, and escalate risks as necessary.
• Build and maintain strong relationships with vendors, service providers, and key internal stakeholders to ensure collaborative risk and cyber security initiatives.
• Support vendor selection and management processes for risk and cybersecurity-related procurements.
• Support the process of vendor performance management.

• Bachelor’s Degree in relevant discipline.
• Minimum of 8 years direct and relevant experience.
• In depth knowledge of risk and cyber security frameworks, standards and best practices (e.g., ITIL, COBIT, ISO/IEC 2700x, IEC/62443, ISO 31000, COSO).
• Credentials:
  Professional certifications PMP required, CISSP, CISM, or equivalent are preferred.