Cyber Risk Management

Cyber Risk Management Cybersecurity Jobs

8 jobs found

22d ago

Cybersecurity & Risk Manager

Lutze Inc Chicago, IL

Chicago, IL

22d ago

Full time Manager Cloud Platforms Cyber Risk

Apply Now

Job Description

Lutze Inc is hiring a Cybersecurity & Risk Manager to lead shared cybersecurity and risk management across DGC, LUTZE, and Amphenol Energy Technologies (AET) from Chicago, IL (onsite).

Responsibilities

Lead cybersecurity activities across DGC, LUTZE, and AET
Maintain cybersecurity policies, standards, and security controls
Identify, assess, and mitigate cybersecurity risks
Conduct risk assessments, vulnerability assessments, and security reviews
Monitor security events, threats, and vulnerabilities across the environment
Define security requirements for infrastructure, applications, cloud platforms, and manufacturing systems
Administer and optimize cybersecurity tools and technologies
Develop and maintain incident response plans and procedures
Lead investigation, containment, and recovery activities for cybersecurity incidents
Coordinate vulnerability remediation with internal teams and external partners
Manage identity and access controls, including privileged account reviews
Assess cybersecurity risks tied to vendors and third-party providers
Support compliance with Amphenol standards, customer requirements, and applicable regulations
Facilitate internal audits, customer assessments, and cyber insurance reviews
Lead cybersecurity awareness training and phishing testing programs
Maintain security documentation, risk registers, and incident records
Support disaster recovery, backup security, and business continuity initiatives
Track cybersecurity metrics, remediation efforts, and overall risk posture
Provide regular cybersecurity updates and recommendations to leadership
Stay current on emerging threats, technologies, and industry best practices
Perform other cybersecurity-related responsibilities as assigned
Partner with Amphenol corporate IT and cybersecurity teams to implement corporate standards, initiatives, and best practices across DGC, LUTZE, and AET

Requirements

Minimum 7 years of cybersecurity experience in manufacturing, industrial, multi-site, or publicly traded organizations
Proven experience developing and managing cybersecurity programs, policies, controls, and risk management processes
Strong knowledge of threat detection, incident response, vulnerability management, identity and access management, and data protection
Experience with firewalls, EDR, SIEM, email security, intrusion detection, multifactor authentication, and vulnerability management tools
Working knowledge of Microsoft 365, Azure, Active Directory, cloud security, networks, servers, operational technology, and manufacturing systems
Familiarity with cybersecurity frameworks and standards, including NIST, CIS Controls, and ISO 27001
Experience conducting risk assessments, security audits, vendor reviews, and compliance activities
Strong analytical, project management, investigative, and problem-solving skills
Excellent communication skills, able to present cybersecurity risks and recommendations to all levels of the organization
Proven ability to lead cybersecurity initiatives across multiple locations and business units
Experience supporting business continuity, disaster recovery, and critical business systems
Ability to manage competing priorities in a fast-paced, global manufacturing environment
Professional certifications such as CISSP, CISM, CRISC, Security+, CEH, or equivalent are preferred

Technologies

Microsoft 365
Azure
Active Directory
NIST
CIS Controls
ISO 27001
Firewalls
EDR
SIEM
Email security
Intrusion detection
Multifactor authentication
Vulnerability management tools

Travel

50-60% travel to Charlotte, NC; Houston, TX; Chicago, IL; Gardner, MA; customer sites; and other Amphenol business units
Travel supports cybersecurity assessments, audits, implementations, investigations, integrations, and strategic initiatives

View full job page →

24d ago

Cybersecurity Business Resilience Principal

Cummins Inc. Columbus, IN

Columbus, IN

24d ago

Full time Cloud Platforms Cyber Resilience Cyber Risk Assessment

Apply Now

Job Description

Cybersecurity Advisor Principal role in Systems/Information Technology focused on strengthening enterprise security posture and business resilience in Columbus, IN.

Responsibilities

Identify vulnerabilities, assess risks, and implement risk-based security controls to protect critical systems and data.
Ensure compliance with security frameworks and regulatory requirements by applying standards, governance practices, and cybersecurity policies across technology solutions.
Analyze vulnerability and configuration data to proactively detect security threats and recommend remediation strategies before business impact.
Partner across teams to influence secure technology design and implementation across the solution development lifecycle.
Review systems and architectures to identify security weaknesses and recommend improvements that support business objectives while reducing operational risk.
Translate emerging threats and vulnerabilities into actionable recommendations for leaders and stakeholders to support informed decision-making.
Apply secure architecture, secure design, and secure coding practices to support confidentiality, integrity, availability, authentication, and non-repudiation.
Mentor less experienced team members and build stakeholder relationships to deliver collaborative solutions with measurable business value.
Design, lead, and implement an IT organization strategy to ensure Disaster Recovery plans exist for every application used at plant sites.
Coordinate with application owners to define, test, and audit DR plans.
Coordinate and participate in testing activities.
Establish and maintain control points for resilience and recovery KPIs.
Design and update disaster recovery and Pace plans.
Conduct risk assessments and support ongoing compliance.
Prepare reports and continuously improve application strategies.

Requirements

5+ years of experience.
College, university, or equivalent degree in Computer Science, Information Technology, or related subject, or relevant equivalent experience.
CISSP or similar certification preferred.
May require licensing for compliance with export controls or sanctions regulations.
Ability to balance multiple stakeholder needs and manage complex, high-volume, sometimes contradictory information.
Demonstrated capability in business insight, collaboration, engagement, and instilling trust through honesty, integrity, and authenticity.
Business analysis planning skills: identify activities for business analysis across five business aspects, level of detail, and requirements elicitation approach to plan resources and document needs and solution characteristics.
Cybersecurity risk management: identify and assess potential impact of cybersecurity risks against industry frameworks, regulations, and organizational policies to develop and implement mitigation strategies aligned to business objectives.
Strategic planning and policy advocacy: identify policy gaps enabled by cybersecurity technologies that protect Cummins data and business information systems.
Systems analysis: design information systems solutions using solution design documents and the security review tool to help the organization operate more securely, efficiently, and effectively.
Systems security requirements planning: gather and evaluate security requirements in cross-functional meetings, translate requirements for technical solutions, and guide partners on applying security requirements through Cummins governance processes to reduce business risk.
Values differences: recognize the value of diverse perspectives and cultures.

Additional Information

Location: Columbus, IN (onsite)
Job type: Exempt - Experienced
Organization: Cummins Inc.
Technologies: Cloud technology
Role category: Off-site Remote
Relocation package: No
100% on-site: No
REQID: 2436913
100% Remote: Not specified

View full job page →

24d ago

Principal Cybersecurity & Technology Risk Architect - AI/Cloud

Fannie Mae Plano, TX

Plano, TX

24d ago

$175k - $239k/yr Full time Ai Security Cloud Risk Management Cyber Risk Management

Apply Now

Job Description

Fannie Mae is seeking a Principal Cybersecurity & Technology Risk Architect - AI/Cloud to act as a first-line senior technical risk authority for enterprise architecture and AI and cloud engineering decisions. In this role, you will provide independent, evidence-based risk challenge, translate technical conditions into decision-ready risk positions, and help drive reusable risk patterns and sustainable remediation across critical technology domains.

Role Responsibilities

Lead first-line risk analysis and credible technical challenges for material architecture, AI/GenAI, agentic AI, and cloud and engineering decisions, converting technical complexity into clear enterprise risk positions and actionable outcomes.
Assess architecture and engineering risks early across security design, trust boundaries, threat scenarios, inherited controls, data flows, identity and privilege, APIs, cloud services, software supply chain risks, and resilience dependencies.
Provide senior risk challenge for AI systems and emerging AI architectures, including risks related to model and data integrity, prompt injection, sensitive data exposure, excessive agency, non-human identities, tool access, third-party models or components, and agentic workflows.
Evaluate control design and operating effectiveness using evidence, distinguishing implemented and effective controls from policies, activities, dashboards, or assertions, and flagging where evidence or assurance is insufficient.
Create reusable risk scenarios, assessment approaches, and minimum evidence expectations for established and emerging technology patterns to reduce reliance on one-off reviews and enable consistent risk decisions at scale.
Interpret threat modeling and scenario analysis to identify credible failure modes, attack paths, concentration risks, and business consequences across interconnected technology environments.
Link technical exposures to enterprise impact, including critical business services, sensitive data, operational resilience, regulatory obligations, and strategic initiatives.
Formulate decision-ready recommendations for senior management by articulating exposure, evidence, uncertainty, alternatives, conditions, accountable owners, and the specific decision required.
Identify systemic and emerging cyber risks by connecting signals across architecture reviews, risk assessments, incidents, issues, exceptions, audit findings, technology change, and industry threat intelligence.
Drive accountable remediation and sustainable risk reduction, challenging whether corrective actions address root causes and validating that closure evidence demonstrates meaningful reduction in exposure.
Partner across Cybersecurity, Technology, Engineering, Data, AI, and Risk while maintaining independence of judgment and clear accountability boundaries.
Serve as a senior technical risk integrator and mentor, improving the quality of risk reasoning, technical challenge, and executive communication across the broader risk organization.

Required Qualifications

8 years of progressively responsible experience in cybersecurity, security architecture, cloud security, AI/ML security, and related professional experience.
Bachelor’s degree (or equivalent practical experience) in cybersecurity, computer science, engineering, technology, risk, or a related discipline.
Demonstrated expertise in enterprise security architecture and modern engineering environments, including cloud architectures, APIs, identity and access patterns, data protection, application/platform security, and software supply-chain risk.
Demonstrated experience assessing AI/ML, Generative AI, or emerging technology risk, including security implications of models, data, AI applications, third-party AI services, and autonomous or agentic systems.
Experience conducting threat modeling, architecture risk assessments, control evaluations, and scenario-based risk analysis for complex technology environments.
Demonstrated ability to assess control design and operating effectiveness from technical evidence, distinguishing effectiveness from policy compliance or completion of risk-management activities.
Ability to translate technical vulnerabilities, architectural weaknesses, and control gaps into business exposure and executive-level risk decisions.
Working knowledge of relevant frameworks and practices, including NIST CSF, NIST 800-53, NIST AI RMF, NIST SSDF/SP 800-218, ISO 27001, and comparable cybersecurity and AI-risk frameworks.
Demonstrated ability to operate effectively when evidence is incomplete by articulating assumptions and uncertainty and reaching defensible conclusions without false precision.
Strong executive writing, synthesis, and presentation skills to communicate technical risk to senior technology, cybersecurity, business, and risk leaders.
Ability to provide constructive, credible challenges to senior engineers, architects, and executives while maintaining productive working relationships and supporting business mission.
Experience working within a complex, regulated enterprise with first-line ownership, independent risk oversight, and audit or assurance accountability.

Technologies and Frameworks

NIST CSF
NIST 800-53
NIST AI RMF
NIST SSDF/SP 800-218
ISO 27001

Location and Employment Details

Location: Plano, TX (onsite)
Employment Type: Full-time

Compensation

Target Salary Range: USD 175,000 - 239,000 per year
Requisition Compensation: 175,000 to 239,000

Education

Bachelor’s Level Degree (Required)
Master’s Level Degree

View full job page →

30d ago

Managing Director, Cybersecurity | Forensic & Litigation Consulting

FTI Consulting Los Angeles, CA

Los Angeles, CA

30d ago Closed

$295k - $469k/yr Full time Cyber Forensics Cyber Litigation Cyber Risk Management

This position is no longer accepting applications (closed Nov 1, 2026).

Job Description

FTI Consulting’s Global Cybersecurity practice is seeking a Managing Director, Operations to help guide day-to-day execution while advancing strategic priorities across forensic and litigation consulting. This leadership role supports the practice’s ability to operate efficiently, scale sustainably, and enable practice leaders to spend more time on client and market-facing work.

The position reports directly to the global product leader and plays a central part in translating organizational direction into operational goals, business development enablement, and measurable performance outcomes.

Key Responsibilities

Coordinate the practice’s response to business opportunities by partnering with the Leader on organizational vision, operational strategy, and hiring needs, including continuous improvement to attract and win work.
Translate strategy into actionable performance and growth goals, supporting goal setting, performance management, and annual operating planning.
Lead development of new materials and updates to existing marketing collateral to support business development, including solutions and industries.
Oversee segment operations and employee productivity, fostering an inclusive culture where team members thrive and organizational outcomes are achieved.
Ensure effective recruiting, onboarding, professional development, performance management, and retention practices.
Develop business strategies and plans aligned with both short-term and long-term objectives developed alongside the Leader.
Partner with the Leader on sales management to help achieve growth targets.
Oversee sales, marketing, and business development approach, including pipeline management and sales efforts.
Analyze internal operations to identify process improvement opportunities.
Coordinate with FLC HR and Finance to ensure appropriate actioning of related issues.
Monitor performance using tracking, establish corrective measures as needed, and prepare detailed reports including current performance and forecasting.
Maintain and build trusted relationships with key stakeholders.

Requirements

Bachelor’s degree in a related field.
Senior-level experience leading multi-disciplinary teams through day-to-day operations and more complex independent projects, with the ability to take a strategic approach.
Understanding of the FTI Consulting business and networks, including knowledge of business functions such as HR, Finance, and marketing.
International business experience.
Excellent interpersonal and public speaking skills.
Leadership skills with steadfast resolve and personal integrity.
Understanding of advanced business planning and regulatory issues.
Strong data analysis capability and comfort with performance metrics.
Ability to diagnose problems quickly and anticipate potential issues.

Compensation

Base salary range: USD 294,500 - 468,500 per year
Compensation disclosure: The compensation range reflects potential base salary. Actual compensation is determined by factors such as market considerations, business needs, and the individual’s location, skills, level of experience, and qualifications.

Location: Los Angeles, CA (onsite)

Education: Bachelor’s degree in related field

View full job page →

1mo ago

Staff Portfolio Manager, Cybersecurity Operations

GEICO Bethesda, MD

Bethesda, MD

1mo ago Closed

$110k - $230k/yr Full time Manager Cyber Risk Management Cybersecurity Operations

This position is no longer accepting applications (closed Oct 27, 2026).

Job Description

GEICO is hiring a Staff Cybersecurity Operations and Portfolio Manager in Bethesda, MD (onsite). In this role, you will lead the planning, execution, and management of cybersecurity technology programs, while shaping how the portfolio is measured, governed, and communicated to senior stakeholders. You will also support decision-making through performance and risk visibility, backed by strong reporting and portfolio analytics.

What you’ll focus on

Develop, maintain, and evolve the framework for managing the cybersecurity portfolio.
Ensure portfolio investments remain tightly aligned to strategic objectives.
Establish and track KPIs that reflect portfolio health, value delivery, and risk.
Create and present reports and dashboards for senior leadership, supporting alignment to organizational and company goals.
Proactively identify, assess, and manage risks and dependencies across the portfolio.
Develop mitigation strategies and escalate critical issues as needed.
Provide oversight of portfolio budgets, track financial performance, and support ROI analysis for proposed and ongoing initiatives.
Define, implement, and continuously improve portfolio management processes, standards, and governance to improve efficiency and effectiveness.
Engage key stakeholders including senior leaders, project managers, tech and product owners, and other partners to communicate portfolio status, decisions, and performance.

Qualifications

Proven experience managing complex portfolios of projects or products, including prioritization, resource allocation, risk management, and performance tracking.
Ability to operate strategically and influence senior-level leadership and stakeholders.
Financial acumen with budget management and ROI analysis in a portfolio context.
Exceptional analytical and quantitative problem-solving skills.
Strong written and verbal communication skills, including synthesizing complex information into executive-level presentations.
Strong organizational skills, attention to detail, and capability to manage multiple priorities in a fast-paced environment.
Familiarity with relevant regulations and standards including NIST, ISO, NYDFS, PCI, FFIEC, NAIC and others.
Bachelor’s degree or equivalent practical experience.

Relevant experience

5+ years of experience in cybersecurity in the insurance industry or related highly regulated fields (finance or other regulated industries).
7+ years of experience in technology portfolio, program, and project management.
7+ years of experience in agile development and strategic planning.
5+ years of experience in stakeholder or partner management.

Technology and standards

NIST, ISO, NYDFS, PCI, FFIEC, NAIC
Azure OpenAI

Benefits

Competitive pay, benefits, and flexibility to support well-being and future needs.
Personalized development programs, mentorship, and certification assistance.

Preferred credentials

Project Management certifications: SAFe Program Consultant (SPC), PMI-PMP, AI Product Manager (for example from DeepLearning.AI), or Responsible AI certifications.
Cybersecurity certifications: CISSP, CISM, CISA, GIAC or related information security certifications.
Familiarity with enterprise AI platforms (such as Azure OpenAI).
Familiarity with GenAI and AI agents in enterprise use cases.

Annual salary: $110,000.00 - $230,000.00

Authorization: At this time, GEICO will not sponsor a new applicant for employment authorization for this position.

View full job page →

1mo ago

IT Audit, Cybersecurity & Risk Senior Consultant

Baker Tilly Advisory Group, LP Milwaukee, WI

Milwaukee, WI

1mo ago Closed

$86k - $163k/yr Full time Senior Consulting Cyber Risk Management

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Join Baker Tilly’s Risk Advisory practice as a Senior Consultant focused on IT audit, cybersecurity, and risk advisory with an SOC reporting emphasis.

Responsibilities

Partner with client executives and management teams to understand business context and help identify and manage financial and operational risks within business systems
Build working knowledge of client organizations and industries through direct client interaction across multiple engagement workstreams
Apply independent, strategic thinking to client systems and risks and provide recommendations for business and process improvements
Support strategic business assurance by assisting with implementation of new processes and controls tied to key risks
Assess, manage, and optimize information technology risk across cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity
Review client processes and controls against industry frameworks to identify gaps in design and execution, then communicate issues and recommendations
Contribute to internal audit programs and IT control assessments including:
- IT strategy and governance
- IT operations, business continuity and disaster recovery
- Cybersecurity
- Third party risk
- ITGC and application controls
- SOC reporting
- Regulatory and compliance requirements
Draft executive summaries and final reports, and document/review engagement work papers using industry-accepted internal audit methodologies
Serve as a business advisor by building client relationships and communicating to deliver strong client service
Deliver professional presentations to internal and external audiences
Expand experience across technology environments, platforms, applications, and tools/utilities
Invest in skill development through external/internal education, training, and cross-training to support organizational goals and career growth
Use relationship-building and networking to grow internal and external professional connections
Support team growth using the Baker Tilly Care and Teach philosophy and help associates pursue professional goals
Participate in team activities that support work-life balance

Requirements

4 year degree
Three (3) years of experience
Bachelor’s degree in management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program
3+ year(s) experience with control testing, SOC reporting, and IT Audit or cybersecurity
Excellent analytical, technical, and problem solving skills with strong attention to detail
Exceptional verbal and written communication, collaboration, and time management skills
CISA, CISSP, CISM, CIA, or CPA certifications preferred
Experience with Cloud audit experience and certifications preferred
Experience as a client serving professional for a consulting firm desired

Location and Salary

Location: Milwaukee, WI (hybrid)
Compensation: USD 85,910 - 162,890 per yearly

Benefits

Comprehensive compensation and benefits package for eligible employees

View full job page →

1mo ago

IT Audit, Cybersecurity & Risk Experienced Consultant (SOC Focus)

Baker Tilly Advisory Group, LP San Diego, CA

San Diego, CA

1mo ago Closed

$102k - $163k/yr Full time Cyber Risk Management Data Security Information Security

This position is no longer accepting applications (closed Oct 25, 2026).

Job Description

Baker Tilly Advisory Group, LP is seeking an IT Audit, Cybersecurity & Risk Experienced Consultant (SOC Focus) to support the firm’s Risk Advisory practice. In this role, you will help clients assess and manage IT risk across governance, compliance, and internal controls, including SOC-related audit work and executive reporting based on engagement findings.

Based in San Diego, CA, this position is hybrid (#LI-hybrid). The role emphasizes independent, strategic thinking while partnering with client leadership to strengthen business systems and technology risk management.

What you’ll do

Partner with client executives and management teams to understand business needs and support the identification and management of financial and operational risks in business systems, helping ensure technology risks are actively managed.
Build in-depth knowledge of clients’ businesses and industries through direct client interaction while contributing across multiple engagement aspects.
Provide recommendations for business and process improvements by thinking independently and strategically about clients’ operations, systems, and risks.
Support implementation of new processes and controls that address key risks, delivering strategic business guidance to clients.
Assess, manage, and optimize information technology risk across areas including IT general controls, financial account and auditing, IT strategy and governance, IT regulatory and compliance requirements, and business continuity.
Review client processes and controls against industry frameworks, identify gaps in both design and execution, and communicate issues and recommendations to client stakeholders.
Assist in developing audit programs and executing internal audits and IT control assessments covering topics such as IT strategy and governance; IT operations and key reports (IPE); automated controls; ITGC and application controls; and regulatory and compliance requirements, specifically Sarbanes Oxley.
Draft executive summaries and final reports for client delivery, and document and review engagement work papers using industry-accepted internal audit methodologies.
Serve as a trusted business advisor by building relationships and communicating effectively to support strong client service.
Continue expanding knowledge across technology environments, platforms, applications, and tools/utilities.
Participate in external and internal education, training, and cross-training opportunities to grow skills and support organizational goals and career development.
Use networking and relationship-building skills internally and externally to support engagement success.
Contribute to team activities that support a work-life balance, including social events and team outings.

Qualifications

Bachelor’s degree in accounting, management/computer information systems, computer science, accounting information systems, computer engineering, industrial engineering, or a related program.
CISA, CIA, or CPA certification(s) preferred.
1+ year(s) of experience with IT audit; prior experience performing SOC audits preferred.
Experience as a client-serving professional for a consulting firm desired.
Strong analytical, technical, and problem-solving skills with close attention to detail.
Exceptional verbal and written communication, collaboration, and time management skills.

Compensation

National pay rate range: $85,910 to $162,890 (yearly).
California pay rate range: $102,000 to $162,890 (yearly).

Benefits

Comprehensive compensation and benefits package to eligible employees.

View full job page →

1mo ago

Cybersecurity Consultant

Guidehouse McLean, VA

McLean, VA

1mo ago Closed

$85k - $141k/yr Full time Cyber Risk Management Cybersecurity Tools Information Security

Cyber Risk Management Cybersecurity Jobs

Get Cyber Risk Management Cybersecurity Jobs alerts