Cybersecurity Specialist – Risk Management

Responsibilities

• Govern changes that could introduce cybersecurity risk into the environment, via IT and OT changes
• Define and enforce operational processes for cybersecurity risk assessment and remediation covering the organization's IT and OT environment
• Establish operational risk management processes and operational playbooks, aligned to corporate cybersecurity policy
• Serve as the focal point and technical consultant to the business units and IT and OT project team and management to assess and identify cybersecurity risks
• Establish risk remediation approaches based upon corporate policies and standards
• Responsible for planning, managing, and coordinating various cybersecurity risk management activities
• Oversee and manage all 3rd-party risk management and act as a gatekeeper for enabling integrations with 3rd-party partners, suppliers, and vendors

• BS or MA in computer science, information security, cybersecurity or a related field
• Cybersecurity certification in risk assessment (or appropriate on-the job experience)
• 5+ years of experience in a cybersecurity, enterprise (ERM), or IT risk management role
• 5+ years of experience with regulatory compliance, risk management frameworks and information security management frameworks (e.g. ISO, NIST, etc)
• Strong understanding of Zero Trust principals
• Cybersecurity principles and practices, including IT and OT cybersecurity risk assessment, cybersecurity risk mitigation, and third-party risk assessment
• Cybersecurity frameworks and standards, such as the NIST CSF, Secure Controls Framework, ISO/IEC 27001, and OT cybersecurity standards (62443, ...)
• Strong background in conducting Business Impact Analysis (BIA) to evaluate the potential impact of cybersecurity risk on critical business processes and functions
• Third Party and Vendor Risk Regulatory and Compliance alignment
• Strong communication skills
• Planning and organizing
• Personal Leadership
• Analytical and Risk Based decision making