Director, IT Risk Management

Company:
MMC Corporate

Description:

We are seeking a motivated and collaborative leader to develop and implement our Global Cyber & IT Risk Management strategies. This role will lead the Global 3rd Party Risk Management Team, supporting vendor risk assessments and working closely with teams to identify, assess, and address risks to critical services, information, and systems. This is a hybrid role (3 days a week in office, 2 days a week remote).

• Develop and support global cyber and IT risk management strategies aligned with business goals.
• Lead the Global 3rd Party Risk Management Team in conducting vendor risk assessments and facilitating remediation efforts.
• Collaborate to develop risk models that assess and quantify risks to critical services, information, and systems.
• Maintain current and comprehensive vendor inventories and assessments.
• Prepare reports, presentations, and dashboards for executive leadership to communicate risk posture and emerging threats.
• Continuously enhance Vendor Risk Assessment methodologies to align with evolving industry standards and best practices.
• Foster a skilled team environment to effectively perform risk assessments and maintain strong client communication.
• Partner with vendors to establish cybersecurity and resilience standards within contracts.
• Coordinate global internal audits, client assessments, and security reviews related to third-party risk.
• Participate in incident response activities involving third parties, collaborating across teams to reduce exposure.
• Engage with operational leaders to identify emerging risks and co-develop risk-reducing solutions.
• Adapt and scale risk management processes to address new and evolving threats, including those related to AI and advanced technologies.

• Experience in cyber and IT risk management, preferably in a global or cross‑functional environment.
• Strong interpersonal and leadership skills with experience supporting diverse, collaborative teams.
• Knowledge of vendor risk assessment and third‑party risk management practices.
• Effective communication skills, able to engage with internal and external stakeholders at all levels.
• Familiarity with current cybersecurity frameworks, standards, and best practices.
• Ability to develop and apply risk models and metrics‑based reporting.
• Experience partnering in contract negotiations related to cybersecurity and resilience.
• Understanding of incident response processes and cross‑functional collaboration.
• Demonstrated ability to innovate and adapt processes to meet evolving threats, including AI‑related risks.

• Proven track record of leading global teams in cyber and IT risk management.
• Experience driving continuous improvement in vendor risk assessment methodologies.
• Strong ability to build partnerships with vendors and internal stakeholders to enhance cybersecurity resilience.
• Expertise in emerging technologies and their associated risks, including AI.
• Ability to communicate complex risk concepts clearly to executive leadership and diverse audiences.

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well‑being.

Marsh McLennan (NYSE: MMC) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses:
Marsh, Guy Carpenter, Mercer and Oliver Wyman. With annual revenue of $24 billion and more than 90,000 colleagues, Marsh McLennan helps build the confidence to thrive through the power of perspective. For more information, visit , or follow on Linked In and X.

Marsh McLennan is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital…