Manager of Cyber Risk Assurance

* This role does not offer visa sponsorship. Candidates must be authorized to work in the U.S. without current or future sponsorship (including CPT, OPT, TN, or H-1B).

The Manager of Cyber Risk Assurance owns the definition, execution, and continuous evolution of Delta Dental of California's cyber risk assurance capabilities. This role is critical to advancing cyber assurance into a future state defined by measurable capability outcomes, automation, AI augmentation, and timely, evidence-based insight. The manager will lead the team responsible for determining whether cyber risk management capabilities are appropriately designed, implemented, and operating effectively.

This leader pursues measurable assurance outcomes across people, processes, and technology. The role collaborates closely with cyber risk capability owners, Technology, Internal Audit, external auditors, Third-Party Risk Management, Risk and Compliance, Legal, and Privacy to support regulatory readiness, audits, examinations, and informed risk decisions.

This individual will lead a multidisciplinary team responsible for Risk Control Monitoring and Validation (RCMV), the Unified Requirements Framework (URF), effectiveness testing, evidence management, issue oversight, audit support, and agentic and deterministic assurance automation.

• Own and execute the cyber risk assurance strategy, driving transformation toward highly automated, AI-augmented, and increasingly continuous assurance.
• Translate strategic objectives, emerging risks, and regulatory obligations into actionable RCMV and URF roadmaps aligned with enterprise cyber risk management goals.
• Maintain the Unified Requirements Framework by harmonizing applicable regulatory, contractual, standards-based, and internal requirements into measurable capability outcomes.
• Develop and maintain a risk-based effectiveness testing framework, including evidence expectations, test procedures, metrics, thresholds, and approved pass/fail logic.
• Assess cyber risk management capabilities for effectiveness; document material gaps as formal issues and ensure appropriate ownership, escalation, remediation, and validation.
• Centralize and maintain authoritative evidence supporting assurance conclusions, internal and external audits, regulatory examinations, and attestations.
• Champion the adoption of automation, analytics, machine learning, and AI to improve evidence collection, control testing, coverage, frequency, consistency, and reporting.
• Lead the evolution of assurance toward scalable, objective, and AI-enabled assessment methods, defining how assurance objectives and evaluation criteria can be translated into repeatable automated processes.
• Partner with capability owners and assurance stakeholders to evaluate regulatory change, extend assurance to new technologies and risk domains, and resolve identified gaps.
• Manage multiple concurrent cyber assurance, audit, and regulatory activities, ensuring deliverables remain on track and critical compliance deadlines are met.
• Define and track key performance metrics that demonstrate assurance coverage, currency, effectiveness, issue remediation, automation adoption, and business value.

• Bachelor's degree and 8+ years of professional experience in cybersecurity, cyber risk management, technology risk, IT audit, regulatory compliance, or controls assurance, including at least 2+ years in leadership roles; or equivalent experience in lieu of education.

• Strong expertise in cyber risk assurance disciplines, including control design and effectiveness, evidence evaluation, testing methodology, regulatory analysis, and issue management.
• Deep understanding of cybersecurity frameworks and requirements such…