Cyber Security Risk Management Lead – Network & Security

As the Lead for Cyber Security Risk Management in the Network & Security domain, you will oversee the entire technology risk lifecycle—identifying, evaluating, and mitigating risks within critical security areas. You will serve as the primary risk advisor, partnering closely with domain leaders, technical experts, and business units to develop resilient security controls and foster a risk-aware culture. Your insights will directly influence our security posture and operational excellence.

Key Responsibilities:

• Lead comprehensive risk assessments for network and security architectures, ensuring proactive identification of vulnerabilities and threats.
• Develop and implement strategies for risk mitigation, control testing, and issue resolution in collaboration with technical SMEs and offshore teams.
• Monitor, analyze, and report on risk data using tools such as ServiceNow and Excel, escalating issues as necessary to senior stakeholders.
• Act as a trusted advisor to domain leaders, cultivating strong relationships that promote effective risk management practices across teams.
• Drive process improvements by enhancing risk management frameworks, policies, and operating models aligned with industry standards such as ISO, COSO, COBIT, and NIST.
• Stay abreast of emerging threats, including AI-specific risks (adversarial attacks, data poisoning, model theft), and provide guidance on mitigation strategies.
• Support regulatory compliance efforts, audit preparedness, and consistency in control testing and documentation.

Qualifications & Experience:

• Proven expertise in cybersecurity risk management, particularly within large enterprise or financial services environments.
• Deep knowledge of network and security architecture, including vulnerability assessment, threat mitigation, and remediations in complex IT landscapes.
• Hands-on experience with AI-specific security threats, with practical strategies to address these risks within enterprise settings.
• Strong understanding of information security frameworks and standards (ISO, COSO, COBIT, NIST), coupled with familiarity with legal, compliance, and audit requirements.
• Skilled at analyzing technical data, asking critical questions, and synthesizing insights for executive-level decision-making.
• Proficiency with risk management tools such as ServiceNow, Excel, and GRC platforms.
• Exceptional stakeholder management and communication skills, capable of influencing diverse teams and driving alignment.

Preferred Qualifications:

• Experience with controls testing, audit platforms, or GRC solutions.
• Knowledge of regulatory and compliance frameworks relevant to technology risk.
• Prior consulting background or demonstrated effectiveness in cross-functional, matrixed environments.