Manager, Technology & Cybersecurity Risk​/Risk Data Analyst

Genworth is hiring a Technology & Cybersecurity Risk leader in Richmond, VA (hybrid) to strengthen how the organization identifies, assesses, monitors, and reports enterprise risk. You will modernize risk management through Power BI dashboards,
Power Automate workflows, and AI-enabled approaches, helping teams turn risk data into actionable insights. The role also includes executive-ready storytelling and risk challenge to improve controls across technology, cybersecurity, and third-party environments.

Hybrid schedule
:
In-office days are Tuesday, Wednesday, and Thursday
, with working hours targeting 9am–5pm EST
. This position is available to Virginia residents with Richmond, Virginia in-office applicants.

• Lead and execute enterprise-wide technology risk assessments across applications, infrastructure, cloud platforms, and data environments.
• Identify, evaluate, and prioritize risks related to availability, security, resilience, and data integrity
  .
• Maintain and manage the technology risk register
  , including risk identification, scoring, and remediation tracking
  .
• Evaluate and challenge IT general controls (ITGCs) and application controls, ensuring design and effectiveness.
• Align risk and control practices to industry standards such as NIST
  , ISO 27001
  , COBIT
  , SOC 2, and CIS Controls
  .
• Partner with Technology and Security teams to drive control improvements and remediation of identified risks.
• Support definition of risk appetite and tolerance
  , including development and monitoring of key risk indicators (KRIs).
• Provide independent oversight and challenge to ensure risks are identified and managed within technology initiatives, projects, and change efforts.
• Support regulatory, audit, and compliance activities by providing documentation, evidence, and subject matter expertise
  .
• Monitor emerging technology and cybersecurity risks (for example, cloud, AI, cyber threats) and translate them into actionable mitigation strategies.
• Conduct cybersecurity risk assessments for enterprise environments across on-prem, cloud, and hybrid
  .
• Assess cybersecurity controls across IAM
  , data protection and encryption
  , network and endpoint security
  , and incident response capabilities
  .
• Oversee vulnerability management activities, including penetration testing and remediation tracking.
• Support cyber incident readiness activities such as tabletop exercises and post-incident reviews
  .
• Develop cybersecurity KRIs and deliver executive reporting, including clear Power Point narratives.
• Collect, validate, and analyze risk data from multiple sources, including GRC tools
  , security platforms, and vendor systems.
• Build and maintain Power BI dashboards for risk registers, KRIs, vendor risk metrics, and trend analysis.
• Design and implement Power Automate workflows to streamline risk processes such as assessments, approvals, and reporting.
• Use AI and Generative AI tools to enhance reporting, summarization, and analysis, and support responsible AI use by identifying and mitigating risks such as data privacy, bias, and accuracy
  .

• 5+ years of experience in one or more of:
  Technology / Cyber Risk, Risk Management / GRC, or Risk Data Analytics.
• Experience conducting risk assessments and managing remediation activities
  .
• Familiarity with risk and control frameworks such as NIST
  , ISO
  , and SOC
  .
• Strong Power BI skills, including dashboarding and data modeling.
• Advanced Microsoft Excel skills for analytics and data manipulation.
• Advanced Power Point skills for executive presentations.
• Experience building dashboards, reports, and risk analytics, and translating data into actionable insights
  .
• Experience using Power Automate or similar workflow automation tools.
• Familiarity with AI / Generative AI tools to improve productivity and analysis.
• Ex…