Risk manager

Job tile: Risk Manager

Duration: 06 Months

Location - Remote (Initial 1 week onsite in Albany NY)

Overview:

• We are seeking an experienced and Certified Risk Manager to lead the design, implementation, and scaling of an enterprise-wide risk management program. This contract opportunity is ideal for a results-driven individual with deep knowledge of risk frameworks and systems, especially in IT and enterprise environments.

Key Responsibilities:

• Lead the transition from IT-centric risk practices to a comprehensive enterprise-wide Risk Management Program.
• Design and implement risk management workflows, dashboards, and reporting mechanisms using ServiceNow IRM (Integrated Risk Management) module.
• Collaborate with stakeholders to ensure alignment with regulatory standards and internal risk appetite.
• Apply Third-Party Risk Management (TPRM) strategies to evaluate and manage vendor and partner risks.
• Integrate and operationalize the NIST Cybersecurity Framework into risk governance practices.
• Calculate risk exposure through quantitative metrics such as Annualized Loss Expectancy (ALE) and provide actionable insights to leadership.
• Provide expertise and guidance in audit readiness, controls testing, and risk mitigation planning.

Required Qualifications:

• CRISC (Certified in Risk and Information Systems Control) certification is mandatory.
• Demonstrated experience in ServiceNow IRM module, including design of workflows and dashboards.
• Solid understanding of Third-Party Risk Management (TPRM) methodologies and best practices.
• Hands-on experience with the NIST Framework and its application in enterprise risk contexts.
• Strong knowledge of risk quantification models, particularly ALE.
• Proven ability to influence and lead enterprise risk initiatives across IT and business domains.