Senior Manager, Cybersecurity Risk Management

Senior Manager, Cybersecurity Risk Management

Location:

Loveland, CO, US, 80538

Workplace Type:
On‑Site

Experience Level: Mid‑Senior Level

Job Type: Full Time

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values: safety, inclusion, integrity, and results. When we say we care, we mean it. We’re creating an inclusive workplace where everyone feels safe, has a sense of belonging, trusts one another, and acts with integrity.

Through the collective expertise of our nearly 26,000 employees, we operate a world‑class network of production, distribution, and ag retail facilities. We efficiently serve growers’ needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

• Develop and maintain a comprehensive cybersecurity GRC strategy aligned with business objectives and risk appetite. Establish and enforce cybersecurity policies, standards, and procedures across the enterprise. Build and mature governance frameworks to support regulatory compliance and risk mitigation.
• Oversee Nutrien’s Threat and Risk Assessment team and functions responsible for mandatory cybersecurity threat and risk assessments of all IT projects, as well as business‑initiated technology projects. Ensure cybersecurity risks to the organization are identified, documented, and remediated to stay within Nutrien’s risk tolerances.
• Ensure the cybersecurity compliance program effectively and efficiently supports the identification of risks presented by non‑compliance and ensures the appropriate documentation, escalation, and mitigation actions support identified risks. Track and report on the effectiveness of mitigation of risks and make data‑driven investment cases for improvements.
• Oversee the Third‑party Cyber Risk Management program. Assess and manage the cybersecurity risks introduced through third‑party vendors and partners in close collaboration with the Legal and Procurement teams.
• Establish and enforce clear cybersecurity policies, standards, and procedures across the organization.
• Building, mentoring, and leading high‑performing and diverse teams.
• Working collaboratively and transparently with peers and partners.
• Financial acumen to manage departmental budget.
• Coordinate efforts with Nutrien’s Internal Audit team and external auditors on behalf of the Technology & Global Cybersecurity team.

• Bachelor’s degree required, preferably in a technology or information security related field; experience may be considered in lieu of education.
• 10+ years of relevant IT experience required.
• 4+ year(s) of experience directly supervising a team of IT professionals required.
• Past Cyber GRC experience.
• Experience with NIST CSF, NIST SP 800‑53, NIST SP 800‑82, HIPAA, HI Trust, SOC1 / SOC
  2.
• Experience in risk management and governance practices.

The salary range for this role, in Loveland, CO, is between $127,500 – $218,600. While we provide this range as general guidance, several factors are taken into consideration when making compensation decisions including, but not limited to, candidate skill set, experience and training, licensure and certifications, work location, and other business and organizational needs. Actual salary and benefits may differ based upon location.

We provide an attractive benefits package that includes comprehensive medical, dental, vision coverage, and life insurance and well as disability coverage for positions working more than 30 hours per week. In addition, we have a retirement program that encourages our employees to save for the longer term, with generous matching employer contributions. Our benefit package also demonstrates our culture of care with paid vacation, sick days and holidays as well as paid personal and maternity/parental leaves and an Employee and Family Assistance Program.

Details of the benefits package will be shared in the application process.

In…