Cybersecurity Risk Manager

Cybersecurity Risk Manager

Join to apply for the Cybersecurity Risk Manager role at Hyundai Capital America
. We are an Equal Opportunity Employer committed to creating a diverse and inclusive culture for our workforce.

Through our service brands Hyundai Motor Finance, Genesis Finance, and Kia Finance, Hyundai Capital America offers a wide range of financial products tailored to meet the needs of Hyundai, Genesis, and Kia customers and dealerships. We provide vehicle financing, leasing, subscription, and insurance solutions to over 2 million consumers and businesses. Our commitment to growth, innovation, and diversification reimagines the customer and dealer experience and launches innovative new products that broaden our market reach.

• Medical, Dental, and Vision plans that include no-cost and low-cost options
• Immediate 401(k) matching and vesting
• Vehicle purchase and lease discounts plus monthly vehicle allowances
• Paid Volunteer Time Off with company donation to a charity of your choice
• Tuition reimbursement

The Cybersecurity Risk Manager is responsible for identifying and mitigating security risks associated with software development and deployment throughout the Software Development Life Cycle (SDLC). This role will enforce security policies, ensure security requirement alignment, and perform security risk assessments.

• Conduct security risk assessments, threat modeling, and impact analyses to identify vulnerabilities across HCA internal solutions, systems, applications, and processes.
• Participate in the cybersecurity risk management framework to align with business objectives and regulatory requirements.
• Maintain security risk metrics by tracking Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) and reporting mechanisms to communicate cybersecurity effectiveness.
• Assist with governance around internal cybersecurity risks, ensuring compliance with internal security policies and regulatory requirements.

• Minimum 5-7 years of progressive experience in cybersecurity governance, risk management, or compliance with an understanding of security risk management, the system development life cycle (SDLC), and the evolving threat landscape.
• Financial services experience preferred.
• Bachelor’s or Master’s degree in Cybersecurity, Information Security, Risk Management, or a related field.
• Certifications such as CISSP, CISM, CRISC, CGEIT, CISA, and ITIL are highly desirable.
• Strong knowledge of Information Security risk management frameworks, Governance, Risk, and Compliance process, IT general controls, and vendor risk management.
• Working knowledge of California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), NYDFS Cybersecurity Regulation, PCI-DSS, FFIEC, SOX, and other relevant laws and regulations.
• Strong understanding of financial regulatory frameworks and cybersecurity best practices.
• Intermediate skills with Microsoft Office Suite.
• Excellent verbal and written communication and presentation skills.
• Ability to work autonomously and in a team environment.

Employees in this class are subject to extended periods of sitting, standing, and walking. Work is performed in an at home and office environment.

United States – California – Irvine

Minimum Salary: $ – Maximum Salary: $

December 27, 2025